North Korean hackers launder 242 million dollars stolen from Binance via Tron
The FBI pressures THORChain and other services to block transactions related to the theft
KEY TAKEAWAYS
- 242 million dollars stolen from Binance were laundered via Tron in two days.
- Relay, THORChain, Chainflip, and Symbiosis transferred 140 million dollars out of Tron.
- The FBI attributed the theft to the North Korean group TraderTraitor and published a list of linked addresses.
- THORChain has not yet confirmed whether it will block the addresses reported by the FBI.
- The theft is part of the largest crypto hack in history, with 6.3 billion dollars lost from Binance.
Binance Hack: North Korean Hackers Launder 242 Million in Two Days
North Korean hackers have laundered 242 million dollars of the 628 million dollars stolen from Binance through the Tron blockchain in just two days. This was revealed by the on-chain analyst SomaXBT, who monitored the transactions since the moment of the theft.
Quick Response
North Korean hackers laundered 242 million dollars in two days via Tron. The funds were moved through Relay, THORChain, Chainflip, and Symbiosis. The FBI attributed the attack to the TraderTraitor group and published a list of linked addresses. THORChain has not yet confirmed whether it will block suspicious transactions.
The Role of Bridges and Exchange Services
Of the 242 million dollars laundered, 194 million were transferred out of Tron via bridges and exchange services. Relay handled the highest volume of transactions, with 48 million dollars, followed by THORChain with 44 million and Chainflip with 32.1 million. Symbiosis moved 16 million dollars but admitted to having gaps in its screening system.
The FBI Warning and THORChain's Response
The FBI attributed the attack to the North Korean group TraderTraitor and published a list of 608 Ethereum addresses, 19 Bitcoin, and one Solana address linked to the theft. The agency urged THORChain and other services to block suspicious transactions. However, Chad Barraford, technical co-founder of THORChain, stated that node operators do not have non-public information and did not confirm whether they will block the listed addresses.
The Money Laundering Operations
The hackers sent 185.1 million TRX and 3.83 million USDT to THORChain in 2,697 deposits. THORChain distributed 17,019 ETH to 170 addresses and 53.25 BTC to 20 addresses. The hackers lost about 12% due to fees and slippage, while the front-end interfaces earned about 145,800 RUNE in affiliate fees.
Gaps in Security Systems
Relay received 37.64 million USDT and 39.28 million TRX, despite claiming to use third-party risk data for transaction screening. Symbiosis admitted to having gaps in its screening system, particularly for fast and sophisticated flows. Chainflip suffered numerous exchange failures, with refunds sent to new Tron wallets.
Implications for Cryptocurrency Security
The attack underscores the need to improve security protocols and screening mechanisms to prevent the laundering of stolen funds. Cryptocurrency companies must adopt more rigorous measures to identify and block suspicious transactions, particularly those linked to known criminal groups like TraderTraitor.
The Crypto Community's Response
The crypto community reacted with concern to the attack, emphasizing the importance of compliance with anti-money laundering (AML) regulations and advanced security measures. Exchanges and bridge services must work closely with authorities to prevent future attacks and protect users.
Challenges for Regulation
The attack highlights the challenges for regulating the crypto sector. Authorities must work to improve the transparency and traceability of transactions, particularly those involving bridges and exchange services. Compliance with regulations such as the NIS2 Directive and the DORA Regulation is essential to ensure digital operational resilience.
Implications for Users
Cryptocurrency users must be aware of the risks associated with using bridges and exchange services. It is essential to adopt advanced security measures, such as using hardware wallets and verifying transactions before executing them. Managing crypto assets requires careful planning and the adoption of best security practices.
The Need for Advanced Security Solutions
Cryptocurrency companies must invest in advanced security solutions, such as MDR (Managed Detection and Response) services and managed SOCs (Security Operations Centers). Protecting sensitive data and preventing data loss (corporate DLP) are fundamental to preventing similar attacks in the future.
Challenges for Exchanges
Cryptocurrency exchanges face significant challenges in managing security and compliance. Adopting advanced identity management (IAM) measures and zero-trust architectures is essential to protect users' funds and prevent cyberattacks.
Implications for the Financial Sector
The attack has significant implications for the financial sector, underscoring the need for greater collaboration between regulatory authorities and cryptocurrency companies. Compliance with regulations such as the NIS2 Directive and the DORA Regulation is essential to ensure the stability of the financial system.
Challenges for Risk Management
Cryptocurrency companies face significant challenges in risk management, particularly regarding money laundering and terrorism financing. Adopting advanced security protocols and compliance measures is essential to prevent cyberattacks and protect users.
Implications for Asset Management
Managing crypto assets requires careful planning and the adoption of best security practices. Users must be aware of the risks associated with using bridges and exchange services and adopt advanced measures for protecting sensitive data.
Challenges for Identity Management
Identity management is fundamental to preventing cyberattacks and protecting users' funds. Cryptocurrency companies must adopt advanced IAM measures and zero-trust architectures to ensure the security of transactions and compliance with regulations.
Implications for Infrastructure Management
Infrastructure management is essential to ensure the security of transactions and compliance with regulations. Cryptocurrency companies must adopt advanced enterprise cloud security measures and disaster recovery as a service (DRaaS) to prevent cyberattacks and protect users' funds.
Challenges for Transaction Management
The Role of Decentralized Bridges in Money Laundering
The intensive use of decentralized bridges like Relay and Chainflip has highlighted the intrinsic vulnerabilities of these systems. Relay handled transactions worth 48 million dollars despite relying on third-party risk data for screening. This raises questions about the real effectiveness of the crypto AML compliance protocols adopted by these platforms.
Symbiosis's Critical Issues
Symbiosis admitted specific gaps in its screening system, particularly evident against fast and sophisticated flows like those implemented by North Korean hackers. The company stated that its mechanisms for identifying suspicious transactions are not sufficient to counter operations of this type, opening a debate on the real capabilities of NIS2 compliance in the sector.
Implications for Institutional Crypto Custody
The episode underscores the critical importance of institutional crypto custody and the need for more robust solutions for managing crypto assets. Companies offering institutional custody services must implement advanced breach remediation and ransomware recovery measures to protect investors' funds.
Challenges for Crypto Taxation in Italy
The event raises important issues for crypto taxation in Italy and bitcoin declaration. Users and crypto accountants must be aware of the tax implications related to stolen and laundered funds, particularly regarding compliance with current regulations.
Prospects for Risk Management
Implications for Crypto AML Compliance
The episode underscores the crucial importance of crypto AML compliance and KYC exchange measures. Exchanges and bridge services must adopt more rigorous protocols to identify and block suspicious transactions, particularly those linked to known criminal groups like TraderTraitor.
Challenges for Enterprise Cloud Security
Managing cloud infrastructure is essential to ensure the security of transactions and compliance with regulations.
Prospects for Identity Management
Implications for Transaction Management
Future Prospects for Crypto Security
Challenges for Crypto Asset Management
Prospects for Identity Management
Future Prospects for Crypto Security
Challenges for Crypto Asset Management
Editorial Note and Disclaimer
The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.
GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not provide real-time information.
The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all responsibility for the improper use of the information published.
In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.
Source: theblock.co · GoYou.it is not a registered news outlet; all content is for informational and educational purposes.
