Cryptocurrency

Bitcoin

Read

Security

On December 24, 2025, TRM Labs reported that stolen cryptocurrency from the 2022 LastPass breach was traced to Russian cybercriminals, revealing significant laundering operations.
The investigation underscores ongoing cyber threats targeting cryptocurrency, raising security concerns for both users and exchanges.
The 2022 LastPass breach exposed encrypted vaults, allowing access to crypto keys. TRM Labs traced stolen funds and highlighted Russian cybercriminal involvement. This has raised concerns over digital asset security and the use of high-risk exchanges.
TRM Labs' analysis identified Wasabi Wallet in laundering over $28 million stolen in 2024. The funds were converted to Bitcoin and passed through Russian exchanges, signaling sophisticated laundering patterns involving the Russian cybercriminal ecosystem. "On‑chain indicators suggest Russian cybercriminal involvement, based on repeated interaction with Russia‑associated infrastructure, continuity of control across pre‑ and post‑mix activity, and the consistent use of high‑risk Russian exchanges as off‑ramps." <a href="https://www.trmlabs.com/resources/blog/trm-traces-stolen-crypto-from-2022-lastpass-breach-on-chain-indicators-suggest-russian-cybercriminal-involvement" rel="noopener noreferrer nofollow">TRM Labs</a>
<h2 id="authorities-call-for-crypto-security-reforms">Authorities Call for Crypto Security Reforms</h2>
TRM Labs estimates the breach led to the exfiltration of tens of millions of dollars. The ongoing wallet draining operation shows vulnerabilities in password management systems and highlights risks of <a href="https://chinaselectcommittee.house.gov/media/press-releases/investigation-reveals-energy-department-collaborated-with-china-s-military-on-research" rel="noopener noreferrer nofollow">exchange-based laundering</a>.
Financial authorities and security experts stress the importance of enhancing cybersecurity measures in crypto trading. TRM Labs' focus on <a href="https://csrc.nist.gov/News/2025/nist-revises-ir-8286-suite-of-reports" rel="noopener noreferrer nofollow">infrastructure reuse</a> and mixer vulnerabilities underscores the need for regulatory initiatives targeting Russian-linked exchanges.
<h2 id="mixers-ineffectiveness-revealed-in-credential-theft">Mixers' Ineffectiveness Revealed in Credential Theft</h2>
Similar credential breaches have led to long-term theft scenarios, underlining the ineffectiveness of mixers for true anonymity. Previous cases demonstrate how credential theft facilitates complex laundering operations.
Experts indicate that multi-year asset drainage, as seen in this breach, reflects on the persistent threats posed by cybercriminal networks. TRM's findings reveal potential hazards of weak passphrase use, signaling a need for improved security protocols <a href="https://csrc.nist.gov/pubs/ir/8587/ipd" rel="noopener noreferrer nofollow">NIST publication on information protection design</a>.
<figure class="wp-block-table">
 <table class="has-fixed-layout">
 <tbody>
 <tr>
 <td>Disclaimer: This <a href="https://www.kanalcoin.com/" target="_blank" rel="noopener noreferrer nofollow">website</a> provides information only and is not financial advice. Cryptocurrency investments are risky. We do not guarantee accuracy and are not liable for losses. Conduct your own research before investing.</td>
 </tr>
 </tbody>
 </table>
</figure> <a href="https://www.kanalcoin.com/lastpass-crypto-theft-russian-link/" rel="noopener noreferrer nofollow">Read original article on kanalcoin.com</a>

TRM Labs Links LastPass Breach to Russian Cybercrime

Table of Contents

Kanalcoin

Other articles published on Dec 28, 2025

Join our free newsletter for daily crypto updates!