Ethereum

2024

United

Tornado Cash

The United States government filed two legal complaints on October 4, 2024, to begin seizing more than $2.67 million in digital assets stolen by the North Korean Lazarus hacking group.
According to the legal filings, the US government seeks to recover approximately $1.7 million in Tether (<a data-ct-non-breakable="null" href="https://cointelegraph.com/tether-price-index" rel="null" target="null" text="null" title="null">USDT</a>) stolen by the organization in the 2022 Deribit hack — which left the options exchange drained of $28 million.
Once the hackers successfully breached a Deribit hot wallet, they passed the funds through the Tornado Cash mixer and several Ethereum (<a data-ct-non-breakable="null" href="https://cointelegraph.com/ethereum-price" rel="" target="_self" text="null" title="https://cointelegraph.com/ethereum-price">ETH</a>) addresses in an attempt to avoid detection.
<figure>
 <img alt="Cybercrime, North Korea, Cybersecurity, Hacks" src="https://s3.cointelegraph.com/uploads/2024-10/019263c6-d5a8-7cc4-9c36-1b1534ef057e" title="">
 <figcaption style="text-align: center;">
 US government asset seizure filing. Source: PACER.
 </figcaption>
</figure>
United States law enforcement officials also filed to recover roughly $970,000 in Avalanche-bridged-Bitcoin (BTC.b) stolen as a result of the Lazarus Group's 2023 hack of the Stake.com gambling platform. The malicious attack left Stake with more than $41 million in losses.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/hackers-got-away-with-440m-in-28-exploits-in-q3-report" rel="null" target="null" text="null" title="null">Hackers got away with $440M in 28 exploits in Q3: Report</a>
<h2 id="lazarus-group-the-likely-culprit-behind-many-crypto-hacks">Lazarus Group the likely culprit behind many crypto hacks </h2>
The Deribit and Stake.com hacks represent only a small fraction of attacks linked to the North Korean Lazarus Group. Onchain sleuths believe the July 2024 hack of the popular WazirX exchange, which left the platform drained of approximately $235 million was <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/wazirx-235m-hack-north-korean-hackers" rel="null" target="null" text="null" title="null">perpetrated by the Lazarus Group</a>.
A concerning Aug. 15 report from onchain detective ZackXBT also uncovered a <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/zachxbt-claims-21-north-korea-crypto-devs-making-500k-month" rel="null" target="null" text="null" title="null">network of North Korean developers</a>, who have infiltrated at least 25 crypto projects. The onchain sleuth <a data-ct-non-breakable="null" href="https://x.com/zachxbt/status/1824047425822310580" rel="null" target="null" text="null" title="null">revealed</a> that the developers were using fake names to gain access to the projects to compromise code and loot treasuries. At the time, ZackXBT explained that all the developers identified were likely working for a single entity.
<h3 id="federal-bureau-of-investigation-issues-warning">Federal Bureau of Investigation issues warning</h3>
The United States Federal Bureau of Investigation (FBI) issued a series of warnings about the Lazarus Group in September 2024 — starting with a warning about <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/fbi-warning-north-korea-scheme-steal-cryptocurrency" rel="null" target="null" text="null" title="null">social engineering scams</a> from the hacking group.
One of these scams involved sending out fake job offers and applications to unsuspecting users. Once the hackers built sufficient rapport with the unsuspecting victim and encouraged them to download malware disguised as employment documentation, the user would be subject to theft or the loss of sensitive personal data.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/crypto-sec-defi-phishing-malware-hackathon/" rel="null" target="null" text="null" title="null">$55M DeFi Saver phish, copy2pwn hijacks your clipboard: Crypto Sec</a>

US gov files complaints to seize assets from North Korean hackers

Table of Contents

Cointelegraph

Other articles published on Oct 6, 2024

Trump Ends SEC Memecoin Will Explode 19,000% Ahead of Exchange Listing, As SHIB and DOGE Struggle

Analysts Predict a Major Price Surge for This Altcoin

Experts Evaluate Solana’s Competitive Strength Against Ethereum

Analyst Reveals the Level to Be Crossed for Bitcoin Price to Change Trend to Upward

Top 5 Cryptos to Watch This Year—Don’t Miss the Next Big Opportunities

Why Does Cardano Outshine Solana and Sui?

Join our free newsletter for daily crypto updates!