Top

Atomic Wallet Hacker Uses Lazarus Crypto Mixer

Web3 & Enterprise·June 07, 2023, 12:27 AM

The stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.

Photo by Micha Brändli on Unsplash

 

Sinbad.io

According to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.

On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.

While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.

 

Atomic Wallet hack

The hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”

In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”

However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”

The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.

Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.

Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.

 

Crypto hacking menace

Lazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.

While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

More to Read
View All
Policy & Regulation·

Dec 13, 2023

NFTs not subject to South Korea’s Virtual Asset User Protection Act

NFTs not subject to South Korea’s Virtual Asset User Protection ActIn anticipation of the Virtual Asset User Protection Act coming into effect in July of next year, the South Korean Financial Services Commission (FSC) has issued an advance notice regarding its subordinate statutes.Photo by Ethan Brooke on UnsplashSeven specific provisionsThe subsidiary regulations under the Act detail seven specific provisions aligned with the Act’s objectives. Firstly, assets categorized as electronic securities, mobile vouchers, deposit tokens backed by the Bank of Korea’s central bank digital currencies (CBDCs) and non-fungible tokens (NFTs) will not be classified as virtual assets and hence, not regulated by this Act. However, in instances where NFTs are used as a means of payment for specific goods or services, they will be regarded as virtual assets.Secondly, banks will take responsibility for managing the deposits of users on cryptocurrency exchanges. This aligns with the Act’s requirement for virtual asset service providers (VASPs) to keep users’ funds separate from their own, either by depositing them in, or entrusting them to, reputable institutions. Under these regulations, banks are required to manage users’ assets in a manner consistent with how investors’ deposits are handled under the Capital Markets Act. This means that banks are allowed to invest VASP users’ assets only in secure instruments, such as state and local government bonds, and are also obligated to pay fees to deposit owners, taking into account the yields of these investments.80% of user assets in cold walletsThe third key aspect of the regulations is that VASPs are required to store a minimum of 80% of user assets in cold wallets, which are not connected to the internet. This is higher than the current requirement of 70%, enhancing the security measures for users of virtual assets. To calculate the total value of a virtual asset at any given time, its total supply is multiplied by its average daily price over the past year. VASPs are obligated to assess the value of virtual assets every month.The fourth regulation mandates that VASPs must enroll in an insurance plan, contribute to a rainy day fund or accumulate reserves. This is to ensure they can fulfill their compensation responsibilities in the event of incidents like security breaches or technical failures. The required preparation amount is set at a minimum of 5% of the user assets stored in hot wallets, as these are more susceptible to risks. VASPs are required to update their compensation thresholds or reserves monthly and must take any necessary actions to comply with these requirements by the next working day following the update.Information disclosure guidelinesAnother regulation addresses the issue of insider trading in the context of the virtual asset market. Under the current Capital Markets Act, information is considered disclosed when it’s made available through disclosure systems of the FSC or the Korea Exchange (KRX). However, since the cryptocurrency market lacks a similar system, the new statute provides criteria for determining when information is deemed disclosed.For instance, if a VASP, including exchanges, releases crucial information about a virtual asset on an exchange and six hours pass, that information is regarded as disclosed. This acknowledges the non-stop nature of the crypto market. Moreover, information disclosed post 6 p.m. is treated as officially disclosed after 9 a.m. the next day.Additionally, if a virtual asset issuer publishes significant information about its token on a website hosting its white paper, the information is deemed public after one day. This is conditional upon the website being publicly accessible and having consistently provided important token information for the preceding six months.These rules aim to provide clarity and fairness in information disclosure in the crypto market, adapting the principles of traditional financial markets to the unique dynamics of virtual assets.No arbitrary suspension of transactionsThe sixth regulation restricts VASPs from arbitrarily halting deposits and withdrawals of virtual assets unless there are justifiable reasons for such actions. Acceptable circumstances for suspending these transactions include situations where the VASP experiences a technical disruption in its system, where regulatory authorities instruct a VASP to cease deposits and withdrawals or where cyberattacks or similar incidents have occurred or are clearly imminent.Lastly, virtual asset exchanges are required to monitor for abnormal transactions continuously. These are transactions that show substantial shifts in the prices or trading volumes of virtual assets, particularly in response to news or rumors that could influence cryptocurrency prices. If VASPs suspect unfair trading practices, they must report to the FSC or the Financial Supervisory Service (FSS). When there is ample evidence of such activities, crypto exchanges are obligated to notify the police or the prosecutors’ office. In addition, the financial regulator has the authority to levy fines based on the prosecution’s decisions or after completing consultations with the prosecution if a year has passed since the day of the report.During the period of advance notice, which spans from Nov. 11 to Jan. 22, the FSC will seek comments from relevant organizations, experts and businesses. This process is aimed at refining the rules and regulations subordinate to the Virtual Asset User Protection Act. Moving forward, the financial authorities plan to publish a set of guidelines and Q&A materials and conduct explanatory sessions, with the goal of ensuring a smooth implementation of the Act.

news
Web3 & Enterprise·

Aug 01, 2023

NPIXEL Wraps Up 2nd Community Test for Web3 Game “Gran Saga: Unlimited”

NPIXEL Wraps Up 2nd Community Test for Web3 Game “Gran Saga: Unlimited”Korean game developer NPIXEL announced on Tuesday the successful completion of the second community test for its Web3-based PC massively multiplayer online role-playing game (MMORPG) called “Gran Saga: Unlimited.”The test — conducted over the course of two weeks with some 8,000 global participants — was aimed at enhancing the gameplay environment and strengthening community-based content ahead of the official release of the game.Photo by Andrey Metelev on UnsplashExploring game features and player-based developmentAccording to local news outlet ETnews, participants had the opportunity to try out various features within the game, including new dungeons, a 16-player raid, and a player-versus-player (PvP) battleground called “Chaos Field.” In particular, the “Idol & Fan” system garnered significant attention, where 100 global influencers who received soulbound tokens participated as “idols” to create diverse content with their “fandoms.”NPIXEL’s development team was actively engaged in the testing process, collaborating with users to strategize dungeon conquests and partake in community activities. They implemented real-time communication with users, gathering feedback and opinions to build a game that players directly contributed to.“Proof-of-Play”: The expansion of blockchain in gamingOne of the key features of Gran Saga: Unlimited is its Proof-of-Play technology, NPIXEL explained, much like the Proof-of-Work process used in cryptocurrency. Proof-of-Play involves recording all the in-game items and commodities that a player receives on a blockchain, thus proving and disclosing the items’ randomness of acquisition. The difficulty of obtaining certain items is determined based on in-game demand, and users can search and verify real-time information such as time of acquisition, ownership identification, and random probability.Upcoming launch and exclusive rewardsThe developer is also offering rewards to all 8,000 testers, including a Mount NFT when the game is launched and a chance to win a whitelist spot raffle of Catcha NFT with 1,000 open spots to all testers.NPIXEL will thoroughly review user feedback and opinions collected during the test to further improve the game, after which they plan to officially launch the game through the web-based premier gaming ecosystem, METAPIXEL.METAPIXEL will be developed on the Layer 1 blockchain network Aptos, which is based on NPIXEL’s partnership with Aptos established back in November of last year.

news
Policy & Regulation·

Oct 20, 2023

Busan Introduces Blockchain-Powered Cards for Multi-Children Families to Offer Social Benefits

Busan Introduces Blockchain-Powered Cards for Multi-Children Families to Offer Social BenefitsBusan Metropolitan City, home to South Korea’s largest port, announced on October 20 (local time) a revision in its criteria for “multi-children families” who enjoy social welfare benefits and the launch of new blockchain-powered cards for these families. The city will reduce the requisite number of children in these families from three to two to extend benefits and encourage a higher fertility rate. To qualify for these benefits, at least one child in the family must be under the age of 19.Photo by Minku Kang on UnsplashBlockchain integrationStarting October 31, eligible families can access these benefits through “family love cards,” which will be available on BPASS, a mobile identification card app developed with blockchain technology. Some of these family love cards will be issued in collaboration with credit card company Shinhan Card.Diverse benefitsThe benefits include discounts at public facilities, restaurants, cram schools (commonly referred to as hagwons), and daycare centers. Specifically, public parking lots and sports facilities will offer services at half the usual rate. Meanwhile, other establishments targeting adolescents and women will either waive their fees entirely or provide reductions.On November 1, Busan will host the 16th annual Multi-Children Family Day ceremony at the City Hall’s international conference center. Having started this event in 2008, Busan stands out as the only metropolitan municipality to celebrate this occasion each year.Efforts to boost fertility rateThis year’s ceremony will highlight Busan’s initiatives to enhance support for multi-child families. The event will honor outstanding families and a childbirth-friendly organization, as well as districts and counties that have been exceptional in implementing childbirth promotion policies. Additionally, the occasion will be marked by special commemorative performances.Busan Mayor Park Heong-joon affirmed the city’s dedication to nurturing children alongside their families. He added that Busan will persistently refine and improve its childbirth policies to offer full support.

news
Loading