{"id":583284,"date":"2023-07-26T15:35:23","date_gmt":"2023-07-26T14:35:23","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=583284"},"modified":"2023-07-27T11:10:23","modified_gmt":"2023-07-27T10:10:23","slug":"lazarus-exploits-atomic-wallet-alphapo","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/lazarus-exploits-atomic-wallet-alphapo\/","title":{"rendered":"Lazarus Possibly Behind Hacks On Atomic Wallet, Alphapo, Coinspaid"},"content":{"rendered":"\n<ul><li>On-chain sleuths linked transactions between addresses involved in major exploits and wallets allegedly controlled by DPRK&#8217;s Lazarus group.<\/li><li>ZachXBT&#8217;s analysis of the hacks on payment providers Alphapo and Coinspaid point to the infamous North Korean cybercrime organization.<\/li><li>Losses from the hacks on decentralized wallet Atomic Wallet and Alphaho exceed $160 million combined.<\/li><li>Coinspaid suspended withdrawals citing a &#8220;technical issue&#8221; around the same time hackers attacked Alphapo.<\/li><\/ul>\n\n\n\n<p>Out of the ROK, Lazarus comes forth!<\/p>\n\n\n\n<p>The notorious cybercrime group from North Korea could be behind a recent string of hacks on decentralized wallet provider Atomic Wallet and exploits on payment providers Alphapo and Coinspaid. <\/p>\n\n\n\n<p>On-chain data pieced together by crypto sleuth <a href=\"https:\/\/twitter.com\/MistTrack_io\/status\/1684174438923661312?s=20\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/twitter.com\/MistTrack_io\/status\/1684174438923661312?s=20\" rel=\"noreferrer noopener nofollow\">@onchainsnoop<\/a> cited by blockchain security firm SlowMist spotted transactions between a pool of wallets involved in the three incidents. <\/p>\n\n\n\n<p>Popular on-chain investigator ZachXBT said ROK&#8217;s &#8220;Guardians of Peace&#8221; are most likely behind <a href=\"https:\/\/twitter.com\/zachxbt\/status\/1666115739764285445\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/twitter.com\/zachxbt\/status\/1666115739764285445\" rel=\"noreferrer noopener nofollow\">Atomic Wallet&#8217;s $100 million hack<\/a>. <\/p>\n\n\n\n<p>On July 25, attackers believed to be Lazarus <a href=\"https:\/\/twitter.com\/zachxbt\/status\/1682941291825627137?s=20\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/twitter.com\/zachxbt\/status\/1682941291825627137?s=20\" rel=\"noreferrer noopener nofollow\">drained<\/a> at least $60 million in crypto from Alphapo hot wallets. Alphapo processed payments for crypto casinos like Ignition and Bovada. Coinspaid, another payments provider purportedly tied to Alphapo halted withdrawals around the same. The operator claims to have processed 19 billion Euros in transactions. <\/p>\n\n\n\n<p>&#8220;Technical issues,&#8221; the Coinspaid team said as the reason for the halt. The team told users to await an official announcement. <\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">Greetings! Our team is aware of the issue. We apologize for the inconvenience. Our technical team is working on a solution. Please wait for the official announcement on this topic. We do our best to resolve the issue as soon as possible. Thank you for your understanding!<\/p>&mdash; CoinsPaid (@coinspaid) <a href=\"https:\/\/twitter.com\/coinspaid\/status\/1683873700355903488?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">July 25, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h2>Lazarus Effect<\/h2>\n\n\n\n<p>Lazarus group is tied to several high-profile hacks in decentralized finance and crypto. On-chain analysts have attributed exploits like the $600 million <a href=\"https:\/\/en.ethereumworldnews.com\/ronin-network-hacked-for-173-6k-ethereum-and-25-5m-usdc\/\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/en.ethereumworldnews.com\/ronin-network-hacked-for-173-6k-ethereum-and-25-5m-usdc\/\" rel=\"noreferrer noopener\">Ronin bridge hack<\/a> and the $100 million <a href=\"https:\/\/en.ethereumworldnews.com\/harmony-recovery-plan-horizon-exploit\/\" target=\"_blank\" data-type=\"URL\" data-id=\"https:\/\/en.ethereumworldnews.com\/harmony-recovery-plan-horizon-exploit\/\" rel=\"noreferrer noopener\">Harmony bridge exploit<\/a> to the DPRK-linked organization. <\/p>\n\n\n\n<p>The U.S. Treasury Department sanctioned Tornado Cash due to suspicions that Lazarus used the crypto mixer to launder hundreds of millions of stolen digital currencies. <\/p>\n\n\n\n<p>Lazarus is also reportedly connected to a network of terrorist financing rings in Russia and across the globe. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>On-chain sleuths linked transactions between addresses involved in major exploits and wallets allegedly controlled by DPRK&#8217;s Lazarus group. ZachXBT&#8217;s analysis of the hacks on payment providers Alphapo and Coinspaid point to the infamous North Korean cybercrime organization. Losses from the hacks on decentralized wallet Atomic Wallet and Alphaho exceed $160 million combined. Coinspaid suspended withdrawals citing a &#8220;technical issue&#8221; around the same time hackers attacked Alphapo. Out of the ROK, Lazarus comes forth! The notorious cybercrime group from North Korea [&hellip;]<\/p>\n","protected":false},"author":55,"featured_media":583291,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[947,2],"tags":[109023,108966,2889,108603],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583284"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=583284"}],"version-history":[{"count":5,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583284\/revisions"}],"predecessor-version":[{"id":583316,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583284\/revisions\/583316"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/583291"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=583284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=583284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=583284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}