Guarantee

2024

Bitcoin

ZachXBT

Avalanche

The $305 million exploit of Japanese crypto exchange DMM Bitcoin might be the work of the notorious Lazarus Group. On-chain investigator ZachXBT revealed that similarities in laundering the stolen funds suggest that the state-sponsored group may be responsible.
Also Read: <a href="https://www.cryptopolitan.com/philippines-doj-charges-two-russians-heist/" rel="noopener noreferrer nofollow">The Philippines’ DOJ charges two Russians for alleged involvement in $7 million crypto heist</a>
This comes after recent transfers of DMM Bitcoin-linked funds to the online marketplace Huione Guarantee. Blockchain security company Elliptic Research recently indicted the marketplace for facilitating billions in illicit crypto-related crimes.
<h3 id="the-lazarus-group-connection-to-the-dmm-bitcoin-hack">The Lazarus Group connection to the DMM Bitcoin hack</h3>
<a style="font-size: 16px;" href="https://x.com/zachxbt/status/1812466959109521649" rel="noopener noreferrer nofollow" target="_blank">According</a> to ZachXBT, the hackers moved over $35 million of the stolen funds to the online marketplace Huione Guarantee in July. The transfers have attracted attention from stablecoin issuer Tether, leading it to blacklist a&nbsp; Tron-based wallet containing 29.6 million USDT. The wallet is connected to Huione and received about $14 million from the DMM Bitcoin hack in just 3 days.
The laundering pattern is the major reason for drawing a connection between the Lazarus Group and whoever hacked DMM Bitcoin. The hackers have adopted a system where they deposit stolen BTC into the mixer and, after withdrawing it, bridge the funds from Bitcoin to either Avalanche or Ethereum networks using THORChain, Avalanche Bridge, and Threshold.
<figure id="attachment_555209" aria-describedby="caption-attachment-555209" style="width: 100%" class="wp-caption aligncenter"><img loading="lazy" decoding="async" class="size-full wp-image-555209" src="https://www.cryptopolitan.com/wp-content/uploads/2024/07/GSctFTaXoAA5T28.jpeg" alt="DMM Bitcoin hack" width="1262" height="1514" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/07/GSctFTaXoAA5T28.jpeg 1262w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/GSctFTaXoAA5T28-250x300.jpeg 250w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/GSctFTaXoAA5T28-1000x1200.jpeg 1000w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/GSctFTaXoAA5T28-768x921.jpeg 768w" sizes="(max-width: 1262px) 100vw, 1262px">
 <figcaption id="caption-attachment-555209" class="wp-caption-text">
 DMM Bitcoin Hack (Source: ZachXBT)
 </figcaption>
</figure>
Once the funds have been moved to these smart contract blockchains, the hackers swap them for Tether USDT and bridge to the Tron network using SWFT. From Tron, the USDT is transferred to Huione. The pattern, which involves chain hopping and mixers, is similar to how Lazarus moves stolen funds.
<blockquote>
 “It is suspected that Lazarus Group is behind the hack due to similarities in laundering techniques and off chain indicators,” ZachXBT said.
</blockquote>
The hackers’ decision to swap BTC for USDT appears strange, given how Tether could blacklist USDT. However, ZachXBT <a href="https://x.com/zachxbt/status/1812472270247604508" rel="noopener noreferrer nofollow" target="_blank">explained</a> that they have no choice because they are cashing out the stolen assets through small OTCs that only accept USDT.
<h2 id="huione-guarantee-becomes-the-preferred-platform-for-bad-actors">Huione Guarantee becomes the preferred platform for bad actors</h2>
The revelation further highlights the growing role of Huione as a place for bad actors looking to move crypto. According to a recent <a href="https://www.elliptic.co/blog/cyber-scam-marketplace" rel="noopener noreferrer nofollow" target="_blank">report</a> by blockchain analytics firm Elliptics Research, the platform, part of the Cambodian Huioine Group, is mostly used by scam operators in Southeast Asia.
Through its investigations, Elliptic discovered that the transaction volume for crypto wallets linked to the platform has been at least $11 billion over the last three years. Merchants on the platform provide various services, including money laundering, malicious technology and software development, and other scam-enabling services.
Also Read: <a href="https://www.cryptopolitan.com/dmm-bitcoin-to-repay-users-after-300m-hack/" rel="noopener noreferrer nofollow">Crypto Exchange DMM Bitcoin Vows To Repay Users After $300M Hack</a>
Although not all transactions on the platform are fraud-related, Elliptic analysis shows that most transactions are connected to illicit activities, and USDT is the preferred crypto among users. In 2024 alone, the transaction volume is already over $3 billion USDT, which is a modest estimate.

North Korea backed Lazarus Group linked to $305 million DMM Bitcoin hack

Table of Contents

Cryptopolitan_News

Other articles published on Jul 14, 2024

Surging to $60,000: Uncovering the Reasons Behind Bitcoin’s Emerging Rally

Bearish Bear Presale: Your Chance to Own $GROWL

Next Solana? Discover Tokens Poised to Surpass Major Altcoins

Akash Network (AKT) Price Rose 30%: Can It Break the Bearish Spell?

Litecoin (LTC) Surpasses Dogecoin (DOGE) in On-Chain Activity, Signaling Whale Confidence

U.S. Investors Show Increased Buying Of Ethereum, Boosting The Coinbase Premium Gap, Signaling Po...

Join our free newsletter for daily crypto updates!