Top

North Korean Hackers Take Off With $100M Atomic Wallet Honeypot

Policy & Regulation·June 14, 2023, 11:44 PM

Having reported last week on a $35 million hack of Atomic Wallet users’ funds, an update on the matter reveals that the situation is much worse than originally thought, with losses now exceeding $100 million.

Photo by Kenny Eliason on Unsplash

 

5,500 wallets compromised

The attack has sent shockwaves throughout the crypto community, raising concerns about the security of decentralized wallets. Atomic Wallet, an Estonia-based project known for its non-custodial approach where users take full responsibility for storing their assets securely, has been hit hard by this unforeseen breach.

Elliptic, a crypto compliance analysis company, published an update on the situation on Tuesday. According to that blog article, it estimates that approximately 5,500 crypto wallets have been compromised, meaning that losses have risen to more than $100 million, highlighting the severity of the attack.

Despite the significant impact on users, Atomic Wallet has yet to provide an explanation regarding the root cause of these substantial losses. Users have taken to social media in frustration, demanding clarification from the company. Surprisingly, the company’s last direct update on Twitter dates back to June 7, leaving users feeling even more anxious.

 

User frustration

One user, Ezra Carlson, expressed frustration, questioning why Atomic Wallet didn’t warn users when they were aware of the ongoing hack. Carlson tweeted: “@AtomicWallet why won’t AM give me a straight answer about why they didn’t warn me, knowing full well that they were being hacked, that it was not safe to use AM last week before I made a transfer to my wallet that was then hacked.”

Another user, “Real Deal Crypto,” criticized Atomic Wallet’s lack of updates, stating: “Your last update was five days ago — SERIOUSLY?!?!”

Although Atomic Wallet acknowledged reports of compromised wallets on June 3, downplaying the impact by claiming that less than 1% of users were affected, the staggering sum of losses indicates a significant breach. Its last communication on the matter came on June 11 when, in responding to a user, the firm said that it continued to investigate and to await Twitter updates on the matter.

 

Hack tied to North Korea’s Lazarus Group

Elliptic has connected this heist to the notorious Lazarus Group, a cyber-criminal organization with ties to the North Korean regime, responsible for stealing over $2 billion in crypto assets through various thefts. This attribution marks the first time a significant crypto heist has been openly linked to the Lazarus Group since their $100 million exploit of Horizon Bridge in June 2022.

In response to the heist, Elliptic has been collaborating with international investigators and exchanges, mobilizing resources to recover the stolen assets. Their efforts have reportedly led to the freezing of over $1 million worth of funds. However, the thief has adapted its behavior in response to the freezing of assets, turning to the Russia-based Garantex exchange to launder the stolen assets, as noted by Elliptic.

This recent attack adds to a series of notable breaches in the crypto industry. Jimbos Protocol experienced an exploit resulting in a loss of $7.5 million, and Tornado Cash faced a malicious proposal that seized control of its governance in May. According to a report by Chainalysis, crypto hackers made off with an estimated $3.8 billion in 2022, with North Korea being responsible for a significant portion of the attacks.

More to Read
View All
Policy & Regulation·

Jun 20, 2023

Korean Travel Rule Solution Provider CODE to Start Charging Monthly Fees Next Month

Korean Travel Rule Solution Provider CODE to Start Charging Monthly Fees Next MonthSouth Korean Travel Rule solution provider CODE, established in collaboration between local cryptocurrency exchanges Bithumb, Coinone, and Korbit, has announced the implementation of service fees starting next month. Up until this point, CODE has been offering its services free of charge. The notification regarding this change was issued to CODE’s clientele, which includes various crypto exchanges, as reported by local tech news outlet Digital Daily.Photo by Kenny Eliason on UnsplashTravel RuleThe Travel Rule regulations, set by the Financial Action Task Force (FATF) and Korean legislation, require Korean trading platforms to maintain records of both the sender and recipient’s information for virtual asset transactions exceeding 1 million KRW ($780). The FATF, founded in 1989 and headquartered in Paris, is an international financial watchdog dedicated to combating global money laundering and terrorist financing.More competitive priceCODE is anticipated to offer its services at a more competitive price of 1 million KRW ($780), in contrast to its rival VerifyVASP (VV), which introduced a monthly fee of $1,800 earlier this year. VV is a product developed by Lambda 256, a subsidiary of Dunamu, the parent company of Upbit, the largest cryptocurrency exchange in Korea.CODE launched its services in March last year. Among its crypto exchange members are Gopax, Cashierest, and Coredax. In December, the Travel Rule solution provider appointed Lee Sung-mi, the former compliance officer of Bithumb, as its new CEO, and since then, it has accelerated its monetization plan. Prior to Lee’s appointment, Coinone CEO Cha Myung-hun had been at the helm of CODE.

news
Policy & Regulation·

Nov 11, 2025

Japan to tighten crypto lending rules as regulator backs bank stablecoin pilot

Japan’s Financial Services Agency (FSA) is moving to close gaps in crypto regulation and support a new bank-led stablecoin pilot, as markets watch for a potential Bank of Japan rate hike. Tougher oversight of crypto lending and IEOsAccording to a CoinPost report, at the fifth meeting of its Digital Asset Working Group held last week, the FSA discussed introducing new requirements to bring crypto lending clearly within the regulatory framework. While firms managing or staking crypto must register as exchanges, some operators have avoided registration by structuring services as borrowing schemes, which are not legally treated as asset management.Photo by Possessed Photography on UnsplashThe FSA flagged that users face both credit and volatility risks, yet operators are not required to segregate customer assets or use cold wallets. Some services offer returns around 10% or tie up funds for several years, with weak risk management and exposure to re-lending defaults and staking slashing. Under the new policy direction, operators will need stronger risk management for re-lending and staking, tighter custody controls, and clearer risk disclosures and advertising. Institutional-only borrowing not offered to the public will remain exempt. Some members questioned whether the new requirements would be practical to implement for off-chain operators, noting that staking is fundamentally on-chain. The group also examined initial exchange offerings (IEOs) lacking financial audits, particularly those aimed at retail investors. Members discussed limits similar to equity crowdfunding: investments over 500,000 yen ($3,000) capped at 5% of annual income or net assets, up to 2 million yen ($13,000). Most past domestic IEOs were under 500,000 yen ($3,200). Some warned such caps could be bypassed through secondary trading, where tokens are immediately tradable. Major banks pilot stablecoinAlongside stricter rules, the FSA will support a stablecoin pilot led by MUFG Bank, Sumitomo Mitsui Banking Corporation, and Mizuho Bank. CoinDesk Japan noted the project, the first under the Payment Innovation Project, will include three additional participants. Mitsubishi Corporation will oversee operations, while Progmat and Mitsubishi UFJ Trust and Banking will handle issuance and custody. The pilot, launching this month with implementation targeted within the year, will test whether a joint stablecoin by major banks can navigate regulatory and operational challenges. Rate hike speculation mountsJapan’s calibrated digital asset push comes as speculation grows over a possible Bank of Japan (BOJ) rate hike next month. Minutes from the BOJ’s October meeting, cited by South Korean outlet Edaily, show one board member saying most conditions for a hike have been met and that financial conditions would stay easy even after an increase. The BOJ kept its rate at 0.5% at that meeting. A rate hike was described as likely if firms are seen committing to wage increases ahead of next spring’s labor talks and if no major global shocks emerge. Markets, however, remain cautious, citing uncertainty over U.S. tariff effects and whether newly elected Prime Minister Sanae Takaichi will endorse such a hawkish stance. 

news
Policy & Regulation·

Aug 03, 2023

Binance Thriving in China Despite Crypto Ban

Binance Thriving in China Despite Crypto BanWhen China cracked down on cryptocurrency trading in 2021, it seemed like Binance, the world’s largest crypto exchange, would have to leave the country behind. However, nearly two years later, an investigative report carried out by the Wall Street Journal finds that business is thriving for Binance in China.Photo by Hanson Lu on Unsplash$90 billion in monthly tradingThe report, which was published on Wednesday, reveals that users managed to trade a staggering $90 billion worth of cryptocurrency-related assets in China within just one month.Internal data, shared with The Wall Street Journal and corroborated by current and former employees, unveils this underground activity. Remarkably, these transactions propelled China to become Binance’s largest market, accounting for a massive 20% of global trading volume, excluding trades by a subset of major traders.Almost one million active Chinese usersDespite the supposed ban, Binance’s internal discussions highlight the pivotal role China still plays for the exchange. Current and former employees indicate that Binance’s investigations team collaborates closely with Chinese law enforcement. This partnership aims to identify potential criminal activities among the 900,000+ active users in China, underscoring Binance’s efforts to maintain oversight.However, Binance now faces regulatory challenges tied to its secretive global operations. In June, the US Securities and Exchange Commission (SEC) filed a lawsuit against Binance and its Founder, Changpeng Zhao (CZ), alleging illegal operations and misuse of customer funds.Meanwhile, the Justice Department is conducting its own investigation. A report by Semafor on Wednesday suggests that authorities are considering fraud charges but they’re concerned that such an eventuality may lead to a run on the exchange. This regulatory onslaught has seen Binance’s market share among US users plummet, leading to a reduction of over 1,000 jobs out of its 8,000-strong workforce.Circumventing regulationThe clandestine existence of Binance’s footprint in China offers insights into the exchange’s ability to function surreptitiously in unwelcoming environments. To circumvent restrictions, Binance directed Chinese users to visit local websites with domain names before rerouting them to the global exchange. This tactic allowed Binance to keep a foothold in China, even after the government blocked direct access to its website in 2017.China’s central bank, responsible for imposing the crypto ban, remained silent when questioned about these developments. Binance’s official stance is that its website is blocked in China and inaccessible to users there.Holding on to its China-based users is crucial for Binance as it navigates a treacherous regulatory landscape that threatens its future. The company’s history with China is intricate. CZ established the firm in Shanghai in 2017, only for the government to initiate a series of regulatory attacks on crypto exchanges soon after. This led to concerns about money being illicitly moved out of the country, and Zhao eventually relocated Binance’s operations to Japan.Despite this move, Binance retained a significant workforce in China, a decision that raised concerns among its US arm regarding data control. Binance’s Chinese heritage also attracted attention, with Zhao addressing the company’s challenge of being labeled both a “criminal entity” in China and a “Chinese company” in the West.Binance’s relationship with China remains complex. As the exchange navigates these murky waters, its ability to operate under the radar and maintain its foothold in markets like China will undoubtedly play a significant role in determining its future trajectory.

news
Loading