• bitcoinBitcoin (BTC) $ 84,469.00
  • ethereumEthereum (ETH) $ 1,918.28
  • tetherTether (USDT) $ 1.00
  • xrpXRP (XRP) $ 2.39
  • bnbBNB (BNB) $ 593.68
  • solanaSolana (SOL) $ 133.54
  • usd-coinUSDC (USDC) $ 0.999885
  • cardanoCardano (ADA) $ 0.745210
  • dogecoinDogecoin (DOGE) $ 0.172997
  • tronTRON (TRX) $ 0.224159
  • staked-etherLido Staked Ether (STETH) $ 1,913.87
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 84,210.00
  • pi-networkPi Network (PI) $ 1.48
  • leo-tokenLEO Token (LEO) $ 9.78
  • chainlinkChainlink (LINK) $ 13.84
  • stellarStellar (XLM) $ 0.279516
  • wrapped-stethWrapped stETH (WSTETH) $ 2,291.76
  • usdsUSDS (USDS) $ 0.999767
  • hedera-hashgraphHedera (HBAR) $ 0.195783
  • avalanche-2Avalanche (AVAX) $ 18.58
  • shiba-inuShiba Inu (SHIB) $ 0.000013
  • suiSui (SUI) $ 2.34
  • the-open-networkToncoin (TON) $ 2.93
  • litecoinLitecoin (LTC) $ 91.86
  • bitcoin-cashBitcoin Cash (BCH) $ 331.75
  • polkadotPolkadot (DOT) $ 4.22
  • mantra-daoMANTRA (OM) $ 6.30
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • wethWETH (WETH) $ 1,920.01
  • bitget-tokenBitget Token (BGB) $ 4.42
  • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 0.999521
  • hyperliquidHyperliquid (HYPE) $ 13.93
  • whitebitWhiteBIT Coin (WBT) $ 28.49
  • wrapped-eethWrapped eETH (WEETH) $ 2,039.84
  • moneroMonero (XMR) $ 209.99
  • uniswapUniswap (UNI) $ 6.07
  • susdssUSDS (SUSDS) $ 1.04
  • daiDai (DAI) $ 0.999657
  • aptosAptos (APT) $ 5.23
  • nearNEAR Protocol (NEAR) $ 2.62
  • pepePepe (PEPE) $ 0.000007
  • okbOKB (OKB) $ 46.31
  • ondo-financeOndo (ONDO) $ 0.875420
  • internet-computerInternet Computer (ICP) $ 5.73
  • ethereum-classicEthereum Classic (ETC) $ 18.07
  • aaveAave (AAVE) $ 174.71
  • gatechain-tokenGate (GT) $ 21.25
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 84,479.00
  • mantleMantle (MNT) $ 0.735882
  • official-trumpOfficial Trump (TRUMP) $ 12.40
  • crypto-com-chainCronos (CRO) $ 0.083465
  • tokenize-xchangeTokenize Xchange (TKX) $ 28.03
  • bittensorBittensor (TAO) $ 261.31
  • vechainVeChain (VET) $ 0.024745
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.999597
  • kaspaKaspa (KAS) $ 0.079896
  • celestiaCelestia (TIA) $ 3.52
  • cosmosCosmos Hub (ATOM) $ 4.28
  • filecoinFilecoin (FIL) $ 2.89
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.214903
  • ethenaEthena (ENA) $ 0.354579
  • fasttokenFasttoken (FTN) $ 4.00
  • algorandAlgorand (ALGO) $ 0.199767
  • sonic-3Sonic (prev. FTM) (S) $ 0.527467
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 84,531.00
  • render-tokenRender (RENDER) $ 3.20
  • arbitrumArbitrum (ARB) $ 0.359918
  • story-2Story (IP) $ 5.87
  • arbitrum-bridged-usdt-arbitrumArbitrum Bridged USDT (Arbitrum) (USDT) $ 1.00
  • jupiter-exchange-solanaJupiter (JUP) $ 0.527171
  • optimismOptimism (OP) $ 0.872450
  • kucoin-sharesKuCoin (KCS) $ 11.13
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 0.513392
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 84,228.00
  • blackrock-usd-institutional-digital-liquidity-fundBlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
  • binance-peg-wethBinance-Peg WETH (WETH) $ 1,916.48
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 1,992.55
  • movementMovement (MOVE) $ 0.452585
  • nexoNEXO (NEXO) $ 1.08
  • xdce-crowd-saleXDC Network (XDC) $ 0.068392
  • makerMaker (MKR) $ 1,173.03
  • dexeDeXe (DEXE) $ 17.34
  • injective-protocolInjective (INJ) $ 10.00
  • usual-usdUsual USD (USD0) $ 0.997836
  • blockstackStacks (STX) $ 0.643731
  • immutable-xImmutable (IMX) $ 0.551633
  • worldcoin-wldWorldcoin (WLD) $ 0.869035
  • binance-staked-solBinance Staked SOL (BNSOL) $ 139.02
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,152.43
  • sei-networkSei (SEI) $ 0.204005
  • flare-networksFlare (FLR) $ 0.015145
  • the-graphThe Graph (GRT) $ 0.094736
  • theta-tokenTheta Network (THETA) $ 0.895395
  • lido-daoLido DAO (LDO) $ 0.957219
  • polygon-bridged-usdt-polygonPolygon Bridged USDT (Polygon) (USDT) $ 0.999746
  • bonkBonk (BONK) $ 0.000011
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 84,041.00
  • eosEOS (EOS) $ 0.503514
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,034.07
  • paypal-usdPayPal USD (PYUSD) $ 1.00
  • tether-goldTether Gold (XAUT) $ 2,981.37
  • tezosTezos (XTZ) $ 0.706823
  • galaGALA (GALA) $ 0.016613
  • wbnbWrapped BNB (WBNB) $ 593.22
  • binance-bridged-usdc-bnb-smart-chainBinance Bridged USDC (BNB Smart Chain) (USDC) $ 0.999294
  • the-sandboxThe Sandbox (SAND) $ 0.284055
  • bittorrentBitTorrent (BTT) $ 0.00000070
  • stargate-bridged-usdc-berachainStargate Bridged USDC (Berachain) (USDC.E) $ 0.999013
  • jito-governance-tokenJito (JTO) $ 2.22
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 84,218.00
  • bitcoin-svBitcoin SV (BSV) $ 33.95
  • iotaIOTA (IOTA) $ 0.182803
  • jasmycoinJasmyCoin (JASMY) $ 0.013765
  • berachain-beraBerachain (BERA) $ 6.29
  • kaiaKaia (KAIA) $ 0.110704
  • msolMarinade Staked SOL (MSOL) $ 170.05
  • pax-goldPAX Gold (PAXG) $ 2,993.35
  • flowFlow (FLOW) $ 0.402456
  • usdx-money-usdxStables Labs USDX (USDX) $ 1.00
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 1,995.45
  • flokiFLOKI (FLOKI) $ 0.000061
  • neoNEO (NEO) $ 8.01
  • ethereum-name-serviceEthereum Name Service (ENS) $ 17.01
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 145.66
  • pyth-networkPyth Network (PYTH) $ 0.149793
  • curve-dao-tokenCurve DAO (CRV) $ 0.410320
  • resolv-usrResolv USR (USR) $ 1.00
  • heliumHelium (HNT) $ 2.95
  • honey-3Honey (HONEY) $ 0.999552
  • beldexBeldex (BDX) $ 0.075671
  • roninRonin (RON) $ 0.840348
  • zcashZcash (ZEC) $ 32.21
  • axie-infinityAxie Infinity (AXS) $ 3.22
  • decentralandDecentraland (MANA) $ 0.272442
  • kavaKava (KAVA) $ 0.462898
  • dogwifcoindogwifhat (WIF) $ 0.507471
  • telcoinTelcoin (TEL) $ 0.005548
  • elrond-erd-2MultiversX (EGLD) $ 18.11
  • true-usdTrueUSD (TUSD) $ 0.999856
  • pancakeswap-tokenPancakeSwap (CAKE) $ 1.64
  • starknetStarknet (STRK) $ 0.175805
  • pumpbtcpumpBTC (PUMPBTC) $ 83,121.00
  • raydiumRaydium (RAY) $ 1.64
  • dydx-chaindYdX (DYDX) $ 0.622004
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999897
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 2,033.33
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.172667
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 0.675958
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 1,919.56
  • chain-2Onyxcoin (XCN) $ 0.013348
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 84,363.00
  • apenftAPENFT (NFT) $ 0.00000043
  • aerodrome-financeAerodrome Finance (AERO) $ 0.535576
  • arweaveArweave (AR) $ 6.46
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 1,920.01
  • conflux-tokenConflux (CFX) $ 0.084020
  • clbtcclBTC (CLBTC) $ 83,543.00
  • ecasheCash (XEC) $ 0.000021
  • apecoinApeCoin (APE) $ 0.519237
  • chilizChiliz (CHZ) $ 0.044148
  • pudgy-penguinsPudgy Penguins (PENGU) $ 0.006703
  • thorchainTHORChain (RUNE) $ 1.17
  • ousgOUSG (OUSG) $ 110.33
  • grassGrass (GRASS) $ 1.49
  • coredaoorgCore (CORE) $ 0.409491
  • usdbUSDB (USDB) $ 0.994922
  • hashnote-usycHashnote USYC (USYC) $ 1.07
  • lorenzo-stbtcLorenzo stBTC (STBTC) $ 83,804.00
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.09
  • matic-networkPolygon (MATIC) $ 0.216008
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 1,918.60
  • infrared-beraInfrared Bera (IBERA) $ 5.66
  • compound-governance-tokenCompound (COMP) $ 41.38
  • trust-wallet-tokenTrust Wallet (TWT) $ 0.868288
  • olympusOlympus (OHM) $ 21.98
  • tbtctBTC (TBTC) $ 84,072.00
  • fraxFrax (FRAX) $ 0.998857
  • amp-tokenAmp (AMP) $ 0.004174
  • cgeth-hashkey-cloudcgETH Hashkey Cloud (CGETH.HASH) $ 1,962.42
  • axelarAxelar (AXL) $ 0.367313
  • pendlePendle (PENDLE) $ 2.14
  • kaitoKAITO (KAITO) $ 1.40
  • stakewise-v3-osethStakeWise Staked ETH (OSETH) $ 1,998.61
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000062
  • akash-networkAkash Network (AKT) $ 1.35
  • beam-2Beam (BEAM) $ 0.006264
  • spx6900SPX6900 (SPX) $ 0.351022
  • mantle-bridged-usdt-mantleMantle Bridged USDT (Mantle) (USDT) $ 1.00
  • binance-peg-busdBinance-Peg BUSD (BUSD) $ 1.00
  • gnosisGnosis (GNO) $ 125.18
  • based-brettBrett (BRETT) $ 0.032115
  • mina-protocolMina Protocol (MINA) $ 0.258661
  • verus-coinVerus (VRSC) $ 3.93
  • reserve-rights-tokenReserve Rights (RSR) $ 0.005524
  • stakestone-berachain-vault-tokenStakeStone Berachain Vault Token (BERASTONE) $ 1,900.33
  • morphoMorpho (MORPHO) $ 1.29
  • aioz-networkAIOZ Network (AIOZ) $ 0.263447
  • golemGolem (GLM) $ 0.293038
  • justJUST (JST) $ 0.030220
  • plumePlume (PLUME) $ 0.148997

Lazarus Group at it again – New victim suspected in $3.1M Tron hack

0 10

Lazarus Group at it again – New victim suspected in $3.1M Tron hack

ZachXBT, the popular crypto sleuth, reported that a victim was hacked on Tron, leading to a loss of about $3.19M in USDT. The stolen USDT was transferred to Ethereum before the ETH was split among 10 addresses and deposited into Tornado Cash. ZachXBT attributes this hack to the notorious North Korean Lazarus Group.

Onchain Lens disclosed that ZachXBT had uncovered another malicious attack by a hacker, leading to the unknown victim’s loss of about 3.19M USDT. According to TronScan, the USDT was transferred to the Ethereum blockchain, where it was swapped for ETH and then split among 10 addresses before being deposited into Tornado Cash (96 X 10 ETH, 4 X 100 ETH, 78 X 1 ETH, 5 X 0.1 ETH).

ZachXBT pointed out that the hacker reused a theft address from the Michael Kong (Fantom/Sonic CEO) hack in October 2023, which had been previously attributed to the Lazarus Group as part of a ‘spearphishing campaign’ in a March 2024 report published by the UN.

On February 22, ZachXBT also revealed that the Lazarus Group had connected the Bybit hack to the Phemex hack directly on-chain by ‘commingling’ funds from the initial theft address for both incidents.

Lazarus Group adds unknown victim to the long list of crypto theft

Zach (@zachxbt) reported that a user was scammed by the Lazarus Group on Tron for approximately $3.2M $USDT

The stolen funds were transferred from #Tron to #Ethereum. The $ETH was then split among 10 addresses and deposited into Tornado Cash as follows: 96 x 10 ETH, 4 x 100 ETH,… pic.twitter.com/JRQ03rtflA

— Onchain Lens (@OnchainLens) March 1, 2025

According to ZachXBT, the Lazarus Group is suspected to have struck once again, this time targeting an unknown victim on Tron and stealing over 3.19M USDT. The loot was then quickly transferred to the Ethereum chain, swapped for ETH, and split among ten addresses before being deposited into Tornado Cash. TronScan data showed that the hacker(s) used two addresses, TYQ3455gFNeqyw and 0xcced1276382f4d, to siphon 3,199,779 USDT from a victim with the address TDNaLds1A1g6vYRU.

The malicious attack attributed to the North Korean hacking group suspected state links comes after a recent heist where the group reportedly stole over $1 billion from the Bybit exchange. Bybit was the victim of a record-breaking ~$1.5 billion Ethereum hack. North Korea’s Lazarus Group was the prime suspect in a sophisticated attack where the hackers infiltrated Bybit’s cold wallet and stole over 400K ETH.

Elliptic’s research claims the Bybit heist is arguably the largest crypto theft in history. The Lazarus Group is suspected of stealing over $6 billion worth of crypto assets since 2017. The proceeds were reportedly spent on North Korea’s ballistic missile program.

Elliptic follows the Lazarus Group’s patterns

According to Elliptic’s research, the Lazarus Group followed a characteristic pattern to launder stolen crypto tokens. The first step was to exchange any stolen tokens for a “native” blockchain asset such as Ether. The group reportedly opted for this method because tokens have issuers who, in some cases, can ‘freeze’ wallets containing stolen assets, but no central party can freeze Ether or Bitcoin.

That was exactly what happened in the minutes following the Bybit theft and the latest Tron hack involving an unknown victim. Hundreds of millions of dollars in stolen tokens were exchanged for ETH. They used decentralized exchanges (DEXs) to avoid any asset freezes that may happen if they use centralized exchanges (CEXs) to launder stolen funds.

As per Elliptic’s report, the second step of the laundering process was to conceal the transaction trail by ‘layering’ the stolen funds. These layering tactics can complicate the tracing process, buying the launderers valuable time to cash out the assets. The layering process includes sending funds through large numbers of cryptocurrency wallets and moving funds to other blockchains using cross-chain bridges or exchanges. It also includes other tactics like switching between different crypto-assets using DEXs, coin swap services, or exchanges and using ‘mixers’ such as Tornado Cash or Cryptomixer. eXch has also emerged as a major and willing facilitator of this laundering.

Source

Leave A Reply

Your email address will not be published.

Verified by MonsterInsights