FBI flags imminent sale of $40M in stolen crypto funds linked to North Korea

The stolen funds are said to derive from several hacks this year, including $60 million from Alphapo and $37 million from CoinsPaid

article-image

ozrimoz/Shutterstock, modified by Blockworks

share

The FBI has issued a warning to crypto companies over recent blockchain activities tied to the theft of hundreds of millions of dollars by the Democratic People’s Republic of Korea (DPRK).

TraderTraitor-affiliated actors, also known as the Lazarus Group and APT38, are accused by the state of siphoning off funds from several crypto protocols and projects last year.

Over the last 24 hours, the FBI said it has tracked about 1,580 bitcoin (BTC), worth more than $40 million, stolen by the DPRK and held in six Bitcoin addresses. The Bureau believes the DPRK may attempt to liquidate the digital assets held therein, according to a statement.

Private sector entities are urged to examine the recent blockchain data linked to the addresses provided by the FBI on Tuesday and be vigilant against transactions directly with or derived from them.

“The FBI will continue to expose and combat the DPRK’s use of illicit activities — including cybercrime and virtual currency theft — to generate revenue for the regime,” it said in a statement.

Among the high-profile international crypto heists attributed to DPRK includes the theft of $60 million from payment providers Alphapo on June 22 and $37 million from CoinsPaid on the same day. A further $100 million from Atomic Wallet at the start of that month has also been flagged.

The thefts from Lazarus last year prompted warnings from several nations, including Japanese local authorities, to provide preventive measures against further attacks. On Monday, cybersecurity firm Palo Alto Networks’ CEO Nikesh Arora told CNBC in an interview, that companies needed to beef up and modernize their systems in a bid to shield themselves from “bad actors.”

The FBI previously confirmed attacks against Harmony’s Horizon bridge and Sky Mavis’ $625 million hack on Ethereum-linked sidechain Ronin Bridge last year, alongside a Cybersecurity Advisory on TraderTraitor. 

Lazarus made attempts to move funds worth $63 million linked to the Horizon bridge, though concerted efforts from the industry, including exchanges, blocked the transfers.

In April, the US Treasury’s Office of Foreign Assets Control sanctioned three individuals, Wu Huihui, Cheng Hung Man and Sim Hyon Sop with alleged ties to the group.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research report HL cover.jpg

Research

It's increasingly apparent that orderbooks represent the most efficient model for perpetual trading, with the primary obstacle being that the most popular blockchains are ill-suited for hosting a fully onchain orderbook. Hyperliquid is a perpetual trading protocol built on its own L1 that aims to replicate the user experience of centralized exchanges while offering a fully onchain orderbook.

article-image

Resy co-founder Ben Leventhal’s newest venture involves public blockchains and free coffee

article-image

Cryptocurrencies look like they are closing out a volatile week relatively flat

article-image

Consensys filed a lawsuit against the SEC in a Texas court on Thursday

article-image

Marathon Digital’s hash rate target of 50 EH/s by the end of 2025 may be achieved a year sooner than expected, CEO says

article-image

The Algorand Foundation touts the network as first to go after pool of 10 million global developers

article-image

Drive-to-earn DePIN project MapMetrics will slowly transition to the peaq blockchain