Top

Atomic Wallet Hacker Uses Lazarus Crypto Mixer

Web3 & Enterprise·June 07, 2023, 12:27 AM

The stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.

Photo by Micha Brändli on Unsplash

 

Sinbad.io

According to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.

On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.

While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.

 

Atomic Wallet hack

The hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”

In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”

However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”

The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.

Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.

Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.

 

Crypto hacking menace

Lazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.

While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

More to Read
View All
Policy & Regulation·

Apr 10, 2023

India’s Upcoming G20 Summit Bullish for Crypto

India’s Upcoming G20 Summit Bullish for CryptoThe upcoming G20 summit in Delhi, India, will mark the first-ever G20 summit hosted in South Asia. The G20 comprises 19 countries and the European Union. While the summit is focused on discussing critical issues related to the global economy, it will also include discussions on cryptocurrencies.©Pexels/Studio Art SmileCrypto policy precursor to mass adoptionRegulations and policy frameworks around crypto will be a significant topic of conversation at the summit, alongside discussions on international financial stability. India’s Finance Minister, Nirmala Sitharaman, confirmed that G20 nations are working towards creating an effective Standard Operating Procedure (SOP) for regulating crypto during the summit.India has been taking a systematic approach to regulate the evolving crypto space, as evidenced by the nation’s evolving stance on cryptocurrencies and the recently launched central bank digital currency (CBDC) pilot. With this in mind, the G20 summit in Delhi is expected to provide a platform for countries to discuss and collaborate on effective crypto regulations and policy frameworks.According to Gracy Chen, Managing Director of the Singapore-based Bitget cryptocurrency exchange, more work on policy relative to crypto in India is bullish for the development of the sector within the South Asian country. “India’s consistent growth in adapting to cryptocurrencies and forming newer policies around it has made it a hub for tech investments. With more development and a policy framework, we can expect higher mass adoption. The G20 summit will be bullish for crypto’s growth in India,” Chen told Indian weekly English-language news magazine, India Today.During the 2022 Budget discussions, the government of India proposed some significant changes to the taxation of cryptocurrencies. As a premium investment product, cryptocurrencies are known for their high volatility, and the government believed that they should be subject to a heavier tax burden. Specifically, they introduced a 30% tax on capital gains earned through the sale of digital assets, as well as a 1% tax on Tax Deducted at Source (TDS) for all crypto transactions.The tax on capital gains applies to all digital assets, and the government intends to track historical records to ensure compliance. Additionally, the 1% TDS is applied to every single transaction, regardless of its size or frequency. These changes were seen by some as a trial framework, and many in the crypto space hoped for greater leniency from the government in the future. However, it remains to be seen whether the government will revise these tax policies in the coming years.CBDC pilot projectsFurthermore, the Reserve Bank of India (RBI) has recently launched two CBDC pilots to test the feasibility of digital currencies in India. The first pilot is a wholesale CBDC, which is being conducted in collaboration with nine banks.The second pilot is a retail CBDC, launched in December, which is being tested in four major cities across India — Mumbai, New Delhi, Bengaluru, and Bhubaneswar. The goal of these pilots is to evaluate the potential of digital currencies in facilitating secure and efficient transactions, as well as to study the possible impact on the traditional banking system.By exploring both wholesale and retail CBDCs, the RBI is taking a comprehensive approach to CBDC development, which may inform future decisions regarding the adoption of digital currencies in India.Chen maintains that “discussions around cryptocurrency policy frameworks accelerate the possibilities of mass adoption in the region.” “With over 750 million internet users, India holds the potential to not just pilot but establish real-life crypto and blockchain use cases for the masses,” she added.

news
Policy & Regulation·

Feb 06, 2024

Thai SEC halts Zipmex operations amid financial concerns

The Thai Securities and Exchange Commission (SEC) has issued a directive mandating Zipmex, a Singapore-based digital asset trading and brokerage platform, to temporarily suspend its operations. This decision is driven by the SEC's call for significant changes in Zipmex's management structure and an improvement in its financial position. The regulator outlined that the cryptocurrency exchange can resume normal operations if it addresses these concerns.Photo by Dan Freeman on Unsplash15 days to rectify issuesIn an official announcement last Friday, the SEC conveyed that Zipmex has a specified period of 15 days to rectify its financial position and operational deficiencies, aligning with the prior orders from the financial regulator. The SEC emphasizes that once the crypto exchange fulfills the regulator's requirements, users should be able to resume fund withdrawals. The securities watchdog had initially issued an order to Zipmex on Jan. 12, instructing the exchange to adjust the maintenance of its net liquid capital and modify its business administration structure and personnel to enhance efficiency and protect customer interests. Anek Yooyuen, Deputy Secretary General of the SEC, explained the legal process involved, stating: "According to the process specified by law, if the digital asset business operator is unable to comply with the SEC’s orders within the specified period, the SEC may propose that the Minister of Finance consider revoking the order." Implementation of robust system to protect investorsIn addition to implementing the SEC's orders regarding its financial operation and operational deficiencies, the exchange is required to establish a robust system protecting investors' deposited assets against exploitation. Once these objectives have been achieved within the required timeframe, Zipmex is obligated to submit a report on these implementations for SEC approval, paving the way for the resumption of operations. The Thai regulator stated that “Zipmex will be able to resume normal business operations upon receiving permission from the SEC.” Longstanding regulatory scrutinyZipmex has been under the regulatory microscope since 2023, facing scrutiny following the company’s struggles off the back of the last crypto market downturn. The SEC's investigation includes a probe into an acquisition by V Ventures and whether Zipmex operated in Thailand without regulatory approval. V Ventures canceled its $100 million buyout of the company in 2023, which would have included the return of customer deposits. The Thoresen Thai Agencies subsidiary company deemed the entire deal terminated on the basis that Zipmex had not fulfilled its contractual obligations relative to the buyout. The platform suspended trading in November 2023, citing regulatory compliance as the reason. Despite the operational suspension, user withdrawals will remain accessible to facilitate an exit from the platform. The initial freeze of withdrawals in July 2022 due to Terra's ecosystem collapse, coupled with crypto lender bankruptcies, led Zipmex to seek court protection and legal assistance to raise capital for creditor payouts. The platform presented a reorganization plan last year, proposing creditor payouts of up to 30 cents on the dollar, subject to asset recovery. However, the initial offer was set at 3.35 cents, with the potential for a higher repayment figure based on the firm's eventual asset recovery. 

news
Policy & Regulation·

Jan 10, 2024

Report finds Asian nations strengthening regulatory oversight of crypto

In a global effort to bolster regulatory control over the cryptocurrency sector, Asian nations feature prominently among 17 jurisdictions globally, who have implemented tighter cryptocurrency regulations in 2023. That’s the view expressed by blockchain analytics firm TRM Labs in a report published on Monday.Photo by CARTER SAUNDERS on Unsplash2023 notable for regulatory tighteningThe increased scrutiny comes on the heels of several crypto meltdowns in 2022, including the collapse of major platforms like Terraform Labs, Celsius, BlockFi and FTX, resulting in a market rout that wiped out trillions of dollars in value. The subsequent year witnessed an extraordinary surge in regulatory measures globally, with governments prioritizing consumer protection in the volatile crypto space. TRM Labs' report indicates that the jurisdictions strengthening consumer protection measures accounted for 80% of the 21 studied, representing 70% of global exposure to cryptocurrencies. As the crypto ecosystem grappled with the aftermath of the FTX collapse at the beginning of 2023, regulatory actions surged, shaping a transformative year for the industry. The TRM Labs report emphasizes that nearly half of the jurisdictions tightening crypto regulations in 2023 prioritized increasing consumer protection measures. Additionally, international organizations, including the G20, Financial Action Task Force, Financial Stability Board, International Monetary Fund and the International Organization of Securities Commissions, played a role in shaping global frameworks and policy recommendations for cryptocurrency regulation. While prominent regulatory moves included the European Union's implementation of the Markets in Crypto Assets Regulation (MiCA) in June, Asian countries were particularly active in rolling out regulatory controls and measures relative to digital asset markets.  Stronger measures in SingaporeSingapore, recognized as an early adopter of crypto regulation, took significant steps in November to curb retail speculation in cryptocurrencies. The city-state’s central bank and financial regulator, the Monetary Authority of Singapore (MAS), brought in these restrictions following a year-long public consultation process, together with a review of cryptocurrency platforms. The country set itself apart from other jurisdictions by becoming one of the first to finalize rules governing stablecoins. That regulatory action included the establishment of a comprehensive framework relative to stablecoin operations. South Korea and Australia increased scrutiny of the cryptocurrency sector, contributing to the global trend of regulatory tightening. Hong Kong licensingHong Kong introduced a new licensing regime for centralized crypto exchanges, aligning with its goal to become a global hub for virtual asset businesses. Following its major initiative in October 2022 to support the virtual asset sector, it has since implemented a mandatory licensing regime for centralized crypto exchanges, allowing them to accept retail investors. Eleven companies, including OKX, one of the largest exchanges by trading volume, have submitted applications for the license in the city. In December, Hong Kong followed Singapore’s lead, by proposing stringent rules for stablecoin issuers, prohibiting unlicensed companies from selling stablecoins to the city's retail investors through regulated channels or actively marketing their tokens within the city. These rules are considered challenging for stablecoin issuers and may potentially deter major stablecoin operators like Tether and USDC from entering the city, according to experts. As Hong Kong solidifies its regulatory stance, it positions itself alongside other major players, contributing to the global evolution of cryptocurrency oversight.

news
Loading