Elliptic: Lazarus hackers returned to using Tornado Cash after blocking the Sinbad mixer
Hackers have started moving funds from the HTX crypto exchange hack into Tornado
15.03.2024 - 08:10
246
3 min
0
What’s new? Elliptic analysts have recorded the movement of funds related to the hack of the HTX exchange and its HECO cross-chain protocol. The attack, which experts attribute to the North Korean group Lazarus, caused the platforms to lose $100 million in November 2023. The stolen funds remained stationary for a long time, but on March 13, they began moving into the Tornado Cash crypto mixer, which was placed on a sanctions list by the US Treasury Department back in August 2022.
What else is known? Following common cryptocurrency laundering schemes, immediately after the hack, the hackers exchanged the stolen tokens for ETH coins using decentralized exchanges (DEXs) but then suspended further transfers.
Lazarus then sent over $12 million to Tornado Cash in more than 40 transactions on March 13 and 14. The service was banned by US authorities for helping to launder $455 million stolen by Lazarus. In response, the group stopped using Tornado Cash and switched to using another crypto mixer called Sinbad.
Then in November 2023, the US Treasury Department banned Sinbad as well, also for its ties to DPRK hackers, eliminating its continued use by Lazarus.
Backdoor has been discovered in the Tornado Cash interface to intercept deposit data
According to community representatives, it has been functioning for two months
However, Elliptic notes that Tornado Cash continues to operate despite the sanctions. The service uses smart contracts on decentralized blockchains, so it can not be seized and shut down in the same way centralized mixers like Sinbad can.
“Lazarus Group now appear to have returned to using Tornado Cash as a way to launder funds at scale and obfuscate their transaction trail,” the company concluded.
In 2023, DPRK hackers carried out a record number of attacks on crypto projects. The damage in this case decreased in comparison with the record of 2022, amounting to just over $1 billion.
Later, the United States, South Korea, and Japan announced the beginning of joint development of measures to combat crypto hackers from the DPRK.
Useful material?
Telegram 
Twitter Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Market
The product will begin trading on the Swiss Exchange on November 19
Nov 12, 2024
Market
The company’s unrealized profits from investing in the first cryptocurrency approached $13 billion
Nov 12, 2024
Market
The company predicts that the rate of the first cryptocurrency will grow to $200 000 by the end of next year
Nov 11, 2024
Technologies
The company also unveiled its own blockchain adoption index
Nov 11, 2024
Cryptocurrency rates
-
Bitcoin
$90 603
BTC
-0.25%
-
Ethereum
$3 105.95
ETH
-2.12%
-
BNB Smart Chain
$579.4
BSC
+1.23%
-
Ripple
$1.12
XRP
+0.27%
-
Dogecoin
$0.363124
DOGE
-2.15%
-
Cardano
$0.726394
ADA
-4.76%
-
Bitcoin Cash
$441.17
BCH
-0.93%
-
Polkadot
$5.58
DOT
+3.12%
-
Litecoin
$89.55
LTC
+1.93%
-
Stellar XLM
$0.205181
XLM
+18.04%