Crypto Treasury Firms Go on $8B Buying Spree in Historic Week
Jason RiggsLog in/ Sign up
Lazarus Group Strikes Again: $3.2M Stolen from Solana, Laundered Through Ethereum and Tornado Cash
Follow
North Korea-Linked Lazarus Group Launders $1.95M in Crypto After Solana Heist
A stealthy crypto theft traced back to North Korea’s Lazarus Group has shaken the Solana and Ethereum ecosystems, after hackers siphoned $3.2 million worth of digital assets and moved the funds through one of the most controversial privacy tools in crypto—Tornado Cash.
Funds Moved from Solana to Ethereum in Coordinated Attack
On 16 May 2025, wallets on the Solana network were drained in a targeted breach.
Blockchain analysts flagged the initial outflow from a Solana address identified as “C4WY…e525”.
The attackers didn’t linger—within hours, they bridged the stolen assets to Ethereum, a network known for its liquidity and wide toolset for asset swaps.
According to on-chain investigator ZachXBT, this manoeuvre bore striking resemblance to previous Lazarus-linked exploits.
Source: Investigations by ZachXBT
The stolen funds were swiftly swapped and transferred through a cross-chain bridge, stripping away obvious traces of origin.
Tornado Cash Used to Obscure $1.95 Million Trail
Once on Ethereum, the attackers began a familiar laundering process.
On 25 and 27 June, two separate deposits of 400 ETH—totalling roughly $1.6 million—were pushed into Tornado Cash.
These transactions match Lazarus’s typical method: break large sums into chunks, move them through privacy mixers, and scatter them across decentralised exchanges.
ZachXBT, who has long tracked high-level crypto exploits, flagged the pattern early.
He pointed to clear similarities between the transaction pattern and previous hacks associated with the Lazarus Group, citing how the funds were bridged, broken into smaller amounts, and funneled through Tornado Cash—methods the group has employed multiple times in the past.
Despite sanctions against Tornado Cash since 2022, its smart contracts remain live on Ethereum.
The U.S. appeals court decision in January 2025 to reverse the sanctions—citing free speech protections—has made enforcement murkier.
Unmoved Funds Still Held On Ethereum
Roughly $1.25 million in stolen funds remain unspent in a wallet on Ethereum labelled “0xa5…d528”.
The balance is held in ETH and DAI, sparking speculation from analysts.
Some believe the money is deliberately left dormant to avoid detection; others suggest it could be reactivated through fresh laundering layers.
Authorities and blockchain monitoring tools are likely to continue watching the address, though Tornado Cash’s ability to erase transaction history complicates future efforts.
Repeat Offender in Crypto’s Largest Heists
The Lazarus Group has long been linked to high-stakes cybercrimes.
From the $100 million Horizon bridge exploit in 2022 to the reported $1.5 billion Bybit breach earlier this year, their fingerprints appear across some of crypto’s most high-profile thefts.
Their tactics remain largely unchanged: breach wallets or smart contracts through phishing or exploits, cash out quickly, move funds across blockchains, then clean them using mixers and non-KYC exchanges.
Researchers note that the Lazarus Group tends to avoid centralised exchanges, where compliance teams can freeze suspicious wallets.
Instead, the group prefers decentralised platforms and cross-chain bridges, which allow funds to move freely without identity checks—making investigations significantly more difficult.
Is Crypto Infrastructure Ready for Nation-State-Backed Threats?
The growing reliance on cross-chain tools, automated bridges, and unregulated privacy protocols is proving to be an effective escape route for well-funded hacking groups.
When the same vulnerabilities are exploited again and again—despite sanctions, audits, and upgraded defences—it raises a fundamental question: are current crypto systems resilient enough to handle threats backed by entire regimes?
With mixers still online and cross-chain swaps left largely unguarded, Lazarus isn't just exposing gaps in infrastructure—they’re exploiting a system that was never built for national-scale cyber warfare.
Gain a broader understanding of the crypto industry through informative reports, and engage in in-depth discussions with other like-minded authors and readers. You are welcome to join us in our growing Coinlive community:https://t.me/CoinliveSG
Add Comment
LoginLeave your comments
0 Comments
Earliest
Load more comments
Related News
- Jason Riggs
Real Pokémon Cards From NFTs? Solana Project Lets Fans Redeem Graded Collectibles Straight From Digital Draws in Gacha-Style
Collector Crypt launched a digital system on Solana where people can buy NFT packs linked to real graded Pokémon cards. Buyers can either keep the NFT or claim the actual card, bringing together digital collecting and physical items.
AnaisTurkish Ride-Hailing Firm Marti Becomes Latest Public Company to Embrace Bitcoin with 20% Cash Reserve Allocation in Treasury Strategy
Marti, a Turkish ride-hailing company, has put 20% of its cash into Bitcoin and plans to increase that to 50%. The move is part of a long-term plan to use crypto as a store of value while keeping its main business growing.
AnaisTrading Platform eToro Could Build Its Own Blockchain to Support Its Monthly “Millions of Transactions”
eToro has started offering tokenised US stocks on Ethereum and is planning to build its own blockchain. This would let users trade shares like crypto and use them in decentralised finance.
AnaisUS SEC Gives Final Nod To In-Kind Bitcoin And Ether ETF Trades, Promising Lower Costs And Higher Efficiency For Investors: Are Altcoin ETFs Next In Line?
The US SEC has approved in-kind trading for Bitcoin and Ethereum ETFs, letting firms trade crypto directly instead of using cash. This change is expected to cut costs, improve trading, and make it easier for big investors to enter the crypto market.
WeatherlyThe Last Encore: CryptoBatz NFT Prices Surge Dramatically as Fans Rush to Own a Piece of Rockstar Ozzy Osbourne’s Iconic Legacy
Ozzy Osbourne’s NFT collection CryptoBatz saw a big jump in sales and price after news of his death. Trading volumes surged over 100,000% in one day, briefly raising the floor price to around $295.
AnaisJPMorgan Plans to Let Clients Borrow Against Bitcoin and Ether by 2026 as Crypto Lending Gains Momentum on Wall Street
JPMorgan is planning to let clients borrow money using crypto like bitcoin and ether as collateral. This comes as rules around digital assets in the US become clearer and demand from wealthy clients grows.
AnaisSEC Chair Paul Atkins Signals Ethereum Is Not a Security, Boosting Confidence for Corporate Treasury Investments: Are ETH Treasuries the New Bitcoin Play?
The SEC Chairman said Ethereum is not considered a security, which has encouraged companies to increase their Ethereum holdings. This clear regulatory view has helped boost Ethereum’s price and sparked more interest from investors and firms.
AnaisShinhan Bank Becomes First South Korean Lender to Add Crypto Tracking and Guides to Its Mobile App
ChatGPT said: Shinhan Bank has added cryptocurrency tracking and educational tools to its SOL app, becoming the first South Korean bank to offer such services. The move signals growing acceptance of crypto in traditional banking, with plans to expand into crypto purchases and wallet management soon.
WeatherlyVitalik Buterin Says Ethereum Layer 2s Can Now Achieve What 2010s Blockchains Never Could
Vitalik Buterin urged developers to simplify Ethereum Layer 2 networks by using Ethereum’s base layer for security and consensus. He said projects should stop rebuilding features Ethereum already provides and focus only on processing and verifying transactions.
Weatherly
Trending News
Cardano DEX MuesliSwap Delays Refund Claim Site Amidst User Frustrations
MuesliSwap, the Cardano-based decentralized exchange, faces growing discontent among users over prolonged delays in launching the refund claim site.
AaronSingapore-based Crypto Mining Platform Bitdeer Teams Up with Nvidia for AI Cloud Services in Asia
Bitdeer Technologies Group, a Singapore-based crypto mining platform, has marked a significant milestone by becoming the preferred cloud service provider (CSP) in the Nvidia partner network. This strategic move places Bitdeer at the forefront of AI development in Asia, providing customers access to the cutting-edge NVIDIA DGX SuperPOD with DGX H100 systems through its upcoming Bitdeer AI Cloud.
JoyMicrosoft's Temporary ChatGPT Access Halt Amid Security Test Glitch
Microsoft briefly restricted ChatGPT access due to a security glitch, swiftly rectifying the incident and highlighting the complex AI landscape and global efforts to address evolving risks.
Hui XinMoisés Zamora's Shift from Hollywood to NFTs
Moisés Zamora, the creative force behind Netflix's "Selena: The Series," is steering away from the conventional avenues of Hollywood, embracing a groundbreaking move into the world of NFTs.
JasperEthereum Rockets Past $2,100 as BlackRock Files for Ethereum ETF with NASDAQ
Asset management giant BlackRock is set to venture into the Ethereum landscape with plans for an exchange-traded fund (ETF) focused on the cryptocurrency.
JasperLeader of South Korea's Largest Crypto Exchange Acquitted of Data Manipulation Charges
In a legal win, the head of Upbit's operator, Dunamu, was declared not guilty by South Korea's Supreme Court in a case involving alleged data manipulation. The charges, related to fake accounts and order volume manipulation, were unanimously dismissed by all three courts, citing "illegal methods" used by prosecutors to obtain evidence. Upbit's success in dominating 80% of South Korea's crypto market is attributed to strategic partnerships, including one with neobank K Bank, streamlining account openings in adherence to regulations.
JixuSC Ventures and SBI Holdings Forge $100M Crypto Venture
SC Ventures and SBI Holdings form a $100 million crypto investment initiative, signalling their active involvement in decentralised finance, tokenisation, and the metaverse.
Hui XinLegal Green Light for Celsius: NewCo Emerges
Judge Martin Glenn, of the Southern District of New York Bankruptcy Court, has given the nod to Celsius Network's reorganization plan
AaronBitwise Co-Founders Face Arrest in Alleged $100M Investor Fraud Scheme
Bitwise Co-Founders Charged by US Attorney and SEC for Alleged $100M Investor Fraud, Accused of Fabricating Financial Information to Secure Funding.
JixuIs BRC-20 Token SATS a Scam? We Think It's Likely.
Made as a memecoin, there is no immediate utility for the token, which makes its rise, together with other more familiar memecoins like DOGE and PEPE, particularly interesting.
Davin