North Korean hackers from the Lazarus Group have carried out another cyberattack, this time stealing cryptocurrency from a wealthy blockchain user. TRON (TRX).
Blockchain sleuth ZachXBT has discovered that hackers hacked a crypto storage facility on the network on February 28 TRON , owned by an anonymous user, and withdrew stablecoins from it Tether (USDT) worth $3,1 million. The coins were then sent to the network Ethereum across the bridge, exchanged them for ETH and laundered them through the Tornado Cash mixer.
ZachXBT Blames Lazarus Group for USDT Attack Because USDT Thieves Used Crypto Wallet Address Linked to Blockchain Organization Hack Fantom Foundation in October 2023. Last time, the detective uncovered a North Korean attack on a crypto exchange bybit , which had $1,4 billion worth of Ethereum stolen.
An analysis of crypto wallets used by members of the Lazarus Group has shown that they own crypto storage facilities created not only on the blockchain TRON , but also in Bitcoin networks, Ethereum , Arbitum (ARB), Solana (SOL) and BNB Smart Chain.
Cryptocurrency wallets linked to Lazarus Group
To return the stolen cryptocurrency, employees bybit launched a bounty campaign and allocated $140 million for its implementation. The exchange has already paid $4,3 million to 16 bounty hunters who helped freeze $42,9 million in stolen coins.
According to analyst Yu Jin, on March 1, attackers began to legalize digital assets stolen from the trading platform again. The criminals have already laundered at least 54% of the Ethereum, so experts bybit It will definitely not be possible to return most of the cryptocurrency.
