In 2023, losses caused by crypto hacking incidents amounted to over $300 million, with the Lazarus Group being identified as the hacker organization responsible. This group, believed to have connections to North Korea, accounted for approximately 17.6% of the total losses recorded during that year.
As per a report from Fortune Magazine, although there has been a decrease in major crypto hacking incidents worldwide, North Korea has managed to retain its significant role as a key player in the realm of cybercrime.
The Lazarus Group is infamous for its involvement in major cyberattacks, including a notable 2014 attack on Sony Pictures, and has since become a prominent threat in the cryptocurrency industry.
Since then, they have redirected their efforts towards targeting crypto protocols, resulting in the successful theft of billions of dollars. One notable instance took place in March 2022, when they absconded with $600 million from the Ronin Network, a bridge utilized by the widely popular Web3 game, Axie Infinity.
According to the report, between 2021 and 2023, an estimated $1.9 billion has been stolen from numerous cryptocurrency projects, with the Ronin Network hack being the most significant breach. In 2023, Lazarus Group carried out a total of five successful attacks, with one notable incident being the theft of $70 million from the Hong Kong-based cryptocurrency exchange, CoinEx, in September.
Blockchain analytics firm, Elliptic, uncovered that a portion of the pilfered funds were routed through a cryptocurrency wallet address previously linked to Lazarus, indicating its utilization for money laundering endeavors.
Despite the concerning data, 2023 has experienced a reduction in the overall monetary losses from digital asset hacks compared to prior years. As reported by TRM Labs, a blockchain analytics firm, the total amount of stolen funds has decreased by over 50%, while the number of attacks has remained relatively constant.
This decline can be attributed to the implementation of enhanced cybersecurity measures within the industry and the increased attention from law enforcement agencies. Additionally, the decrease in prices may have diminished the profitability of such hacking endeavors.
However, despite the overall decline, the Lazarus Group remains a significant threat. In 2023, they altered their strategy and started focusing on targeting centralized finance (CeFi) platforms such as CoinEx, rather than decentralized protocols. They also targeted users of the noncustodial crypto wallet Atomic and the online casino and betting platform Stake.com.
Law enforcement agencies have been proactive in combating these illicit activities by tracing stolen funds and disrupting services known as crypto mixers. These mixers enable the combining and distribution of digital assets, thereby making tracking and investigation more complex.
According to Bitcoinist, the US Treasury Department imposed sanctions on Tornado Cash, a well-known mixing service, in August 2022. In September 2023, two of its founders were indicted on charges of money laundering. In November, the US Treasury Department also imposed sanctions on Sinbad.io, another mixing service that is frequently utilized by the Lazarus Group.
In order to further tackle digital exploits, the Treasury Department intends to broaden its supervisory authority over the sector. Deputy Secretary Wally Adeyemo proposed stricter know your customer (KYC) standards for decentralized platforms such as mixers and wallet providers during a crypto industry policy summit in late November.
Overall, while efforts to mitigate cyber threats in the crypto industry are ongoing, the persistence and evolving tactics of groups like Lazarus highlight the need for continued vigilance and proactive measures to safeguard the ecosystem.
Strengthening cybersecurity practices, enhancing regulatory oversight, and fostering international cooperation will play crucial roles in combating cryptocurrency-related cybercrime.
I was recently approached by a team who had $1.3 million stolen from their coffers via malicious code. Unbeknownst to the team, they had hired multiple North Korean IT personnel as developers under false identities.
JinseFinanceTo sever the financial lifeline fuelling North Korea's clandestine weapons programmes, South Korea is actively shaping legislation designed to freeze and trace the former’s crypto assets.
KikyoFrom Ronin to Atomic Wallet, North Korean hackers have attacked many crypto companies and institutions. But what lies behind the string of attacks?
ClementSecurity experts note a shift in strategy, as North Korea now targets multiple companies instead of one at a time.
BeincryptoThe Binance-hosted wallets received more than $2 million worth of various cryptocurrencies that were then sent on to North Korean entities.
Others
Coinlive The recent crypto price rally is not the only thing going up; hackers from North Korea have also been upping their momentum in crypto cyber attacks with an attempt made just days ago.
CatherineNorth Korea seems to be using hacked funds to finance their new nuclear adventures.
OthersThe latest report from Chainalysis, a blockchain data analysis organization, shows that in 2022, DeFi will become the main target of the two major criminal activities of money laundering and hacking.
FtftxThe government department hinted that the addresses were added to the list in an effort to stop North Korea from evading sanctions imposed by the United States and United Nations.
Cointelegraph