Top

North Korean Hackers Take Off With $100M Atomic Wallet Honeypot

Policy & Regulation·June 14, 2023, 11:44 PM

Having reported last week on a $35 million hack of Atomic Wallet users’ funds, an update on the matter reveals that the situation is much worse than originally thought, with losses now exceeding $100 million.

Photo by Kenny Eliason on Unsplash

 

5,500 wallets compromised

The attack has sent shockwaves throughout the crypto community, raising concerns about the security of decentralized wallets. Atomic Wallet, an Estonia-based project known for its non-custodial approach where users take full responsibility for storing their assets securely, has been hit hard by this unforeseen breach.

Elliptic, a crypto compliance analysis company, published an update on the situation on Tuesday. According to that blog article, it estimates that approximately 5,500 crypto wallets have been compromised, meaning that losses have risen to more than $100 million, highlighting the severity of the attack.

Despite the significant impact on users, Atomic Wallet has yet to provide an explanation regarding the root cause of these substantial losses. Users have taken to social media in frustration, demanding clarification from the company. Surprisingly, the company’s last direct update on Twitter dates back to June 7, leaving users feeling even more anxious.

 

User frustration

One user, Ezra Carlson, expressed frustration, questioning why Atomic Wallet didn’t warn users when they were aware of the ongoing hack. Carlson tweeted: “@AtomicWallet why won’t AM give me a straight answer about why they didn’t warn me, knowing full well that they were being hacked, that it was not safe to use AM last week before I made a transfer to my wallet that was then hacked.”

Another user, “Real Deal Crypto,” criticized Atomic Wallet’s lack of updates, stating: “Your last update was five days ago — SERIOUSLY?!?!”

Although Atomic Wallet acknowledged reports of compromised wallets on June 3, downplaying the impact by claiming that less than 1% of users were affected, the staggering sum of losses indicates a significant breach. Its last communication on the matter came on June 11 when, in responding to a user, the firm said that it continued to investigate and to await Twitter updates on the matter.

 

Hack tied to North Korea’s Lazarus Group

Elliptic has connected this heist to the notorious Lazarus Group, a cyber-criminal organization with ties to the North Korean regime, responsible for stealing over $2 billion in crypto assets through various thefts. This attribution marks the first time a significant crypto heist has been openly linked to the Lazarus Group since their $100 million exploit of Horizon Bridge in June 2022.

In response to the heist, Elliptic has been collaborating with international investigators and exchanges, mobilizing resources to recover the stolen assets. Their efforts have reportedly led to the freezing of over $1 million worth of funds. However, the thief has adapted its behavior in response to the freezing of assets, turning to the Russia-based Garantex exchange to launder the stolen assets, as noted by Elliptic.

This recent attack adds to a series of notable breaches in the crypto industry. Jimbos Protocol experienced an exploit resulting in a loss of $7.5 million, and Tornado Cash faced a malicious proposal that seized control of its governance in May. According to a report by Chainalysis, crypto hackers made off with an estimated $3.8 billion in 2022, with North Korea being responsible for a significant portion of the attacks.

More to Read
View All
Web3 & Enterprise·

Oct 17, 2024

Thailand’s oldest bank launches stablecoin-based payments

Siam Commercial Bank (SCB), Thailand’s oldest bank and fourth-largest lender, has launched a cross-border payments service which depends upon the use of stablecoins.  The project is the culmination of a collaboration between SCB, SCB 10X, the disruptive technology investment arm of the SCBX Group, payment solutions provider Lightnet and blockchain development platform Fireblocks. It has successfully completed its testing phase within the Bank of Thailand’s regulatory sandbox, moving forward to the commercialization phase. According to Indian news portal Business News This Week, SCB launched the cross-border payments solution on October 16 in an effort to get out ahead of its TradFi peers relative to banking and financial services innovation.Photo by allPhoto Bangkok on PexelsFaster with lower costsThe service will enable 24/7 transfers on an international basis for the bank’s retail users. In accessing the service, users may use local currency to make transactions. Ordinarily cross-border payments implicate a number of steps in order to complete clearance, including the need to effect a currency conversion. Furthermore, banks need to maintain nostro/vostro accounts with foreign banks to complete such transfers.  In this instance, the bank is claiming that transactions using the service will be much faster than existing cross-border transfer options. The clearance and settlement process will be far more efficient in terms of the time required and the liquidity requirements. Pre-funding required in the legacy process has been eliminated, reducing capital requirements, while operational costs have also been reduced. SCB’s First Executive Vice President and Head of Digital Juristic and Payment, Thanawatn Kittisuwan, commented on the development, stating: “By integrating blockchain technology, the project promises a more efficient, reliable, and accessible solution for cross-border transactions. By leveraging blockchain technology and stablecoins, we are making cross-border remittances more efficient, reliable, and accessible for everyone. SCB has a long-standing tradition of embracing innovative technologies to enhance our financial services. This latest collaboration with Lightnet and Fireblocks builds upon SCB’s history of pioneering fintech solutions. ” Improved customer experienceLightnet CEO Tribodi Arunanondchai suggested that the new service will provide significant improvements to customers’ experience in cross-border money transfer. He added that the service “promotes financial inclusion as there is a lower capital requirement per transaction,” while strengthening Thailand’s position as an ASEAN (Association of Southeast Asian Nations) financial hub.  SCB and Lightnet first partnered in 2020. At that point, the duo envisaged that there was scope to cooperate in order to facilitate payment processing and frictionless real-time remittances to Thailand from any point overseas with low fees. Lightnet relies upon the Velo Protocol to enable its remittance services. Back in 2022 the firm received a $50 million commitment from LDA Capital, with Lightnet earmarking the funding to boost cross-border payments over the Velo protocol. For its part SCB has demonstrated its interest in crypto beyond this Lightnet collaboration. In 2023 the bank struck a deal with South Korean crypto venture capital firm Hashed, with the objective of pooling resources and researching and exploring how best to deploy any research outcomes relative to the company’s affiliates. The bank has also been involved in developing an application for Thailand’s central bank digital currency, the digital baht.

news
Web3 & Enterprise·

Jun 09, 2023

Animoca Brands Expands Focus to Non-US Markets

Animoca Brands Expands Focus to Non-US MarketsHong Kong-based Web3 and blockchain unicorn, Animoca Brands, is shifting its attention to markets outside the United States following the Securities and Exchange Commission’s (SEC) classification of its $SAND token as an unregistered security.This move comes after the SEC named $SAND, along with other tokens like Solana and Polygon, in lawsuits against major exchanges Binance and Coinbase Global. The labeling of these tokens as securities by the SEC poses legal risks for companies involved in their sale.Photo by Zulian Firmansyah on UnsplashNavigating regulatory challengesAnimoca Brands, led by Co-Founder and Chairman Yat Siu, has long embraced a global approach rather than focusing solely on one territory. Siu clarified the firm’s response to the latest regulatory development to the South China Morning Post (SCMP) via email on Thursday.He emphasized that while the SEC concentrates on the US, Animoca Brands operates in more progressive jurisdictions such as Hong Kong and Japan, where $SAND is widely available and accepted. In response to the recent blockchain-hostile climate in the US, the company has proactively started emphasizing other markets, reducing its reliance on the US market and mitigating potential risks associated with regulatory actions.Exchange business impactWhile Coinbase CEO Brian Armstrong has declared that his company has no intentions of delisting tokens labeled as securities by the SEC, this decision poses challenges for other exchanges less committed to selling these tokens. Dan Gallagher, Chief Legal Compliance and Corporate Affairs Officer of Robinhood Markets, expressed concerns about listing tokens due to regulatory rules and the uncertainty surrounding tokens created by organizations outside the US.These developments could have a chilling effect on exchanges, prompting crypto firms to consider moving away from the US market due to perceived uncertainty and the associated legal risks. As a demonstration of that, in a bankruptcy court hearing on Thursday, it emerged that the FTX Debtor is talking with bidders with a view to restarting the international business but restarting the US-based business is less certain.Animoca’s Middle East ventureIn a further display of its commitment to expanding outside the US, Animoca Brands announced plans in March to make significant investments, worth tens of millions of dollars, in the Middle East. This move reflects the company’s proactive strategy to tap into non-US markets and leverage the growth potential offered by progressive jurisdictions.Animoca Brands’ decision to prioritize non-US markets and reduce its reliance on the US market aligns with its global operating approach. The SEC’s classification of $SAND as a security has prompted the company to shift its attention to more progressive jurisdictions where $SAND remains widely accessible.As other firms, including Ripple, also explore growth opportunities outside the US, the global landscape of the crypto industry is evolving. By navigating regulatory challenges and expanding into promising markets, Animoca Brands aims to position itself for continued success and mitigate potential risks associated with the SEC’s actions in the US market.

news
Policy & Regulation·

Oct 20, 2023

Regulatory Caution Among Asian Nations Amid Reports of Illicit Financing

Regulatory Caution Among Asian Nations Amid Reports of Illicit FinancingWith a plethora of reports of crypto-related terrorist financing having been published in recent weeks, it’s understood that Asian nations may be looking to exercise caution when it comes to the current ongoing process of establishing regulatory guidelines for crypto.That’s according to a report published by the South China Morning Post (SCMP) on Thursday. The use of cryptocurrency by Hamas to fund its attack on Israel is being seen as the catalyst that may drive authorities in various Asian nations to take a more cautious approach to regulating digital currencies, according to analysts cited by the publication.Raj Kapoor, the founder of India Blockchain Alliance (IBA), commented on these recent developments, stating:”It is a kick on the backside for most governments. All regulatory bodies will take a closer look at crypto regulation. Governments will need to start implementing new rules and regulations.”At the recent G20 summit held in New Delhi, a joint declaration called for the regulation, supervision, and oversight of crypto assets, among other measures. The declaration emphasized the importance of supporting “a coordinated and comprehensive policy and regulatory framework.”Kapoor stressed the importance of revisiting the declaration and developing solutions to implement its objectives.Photo by Adolfo Félix on UnsplashRenewed scrutinyEvents in Palestine in recent weeks have led to renewed scrutiny when it comes to monitoring illicit financing activity via cryptocurrency. Only days following the recent Hamas attack, Israeli authorities moved to freeze specified crypto accounts.That scrutiny has continued in recent days, with more accounts having been frozen on crypto platforms such as Binance, while more still have been identified as suspicious, with requests for further information having been submitted in respect of over 200 additional accounts.On Wednesday it emerged that the United States Treasury’s Office of Foreign Assets Control (OFAC) had sanctioned a Gaza-based crypto platform.Potential over-reactionWhile crypto-related terrorist financing has been widely publicized, blockchain analytics firm Chainalysis warned on Wednesday that crypto’s role in this illicit activity has likely been overstated. In its blog post on the subject, the firm stated:“Although terrorism financing is a very small portion of the already very small portion of cryptocurrency transaction volume that is illicit, some terrorist organizations raise, store, and transfer funds using cryptocurrency.”Additionally, Chainalysis stated that it had seen “overstated metrics and flawed analyses of these terrorist groups’ use of cryptocurrency.” Peter Van Valkenburgh, Director of Research at non-profit crypto advocacy group Coin Center, also believes that reporting on the matter is not balanced. Taking to X, he stated:“Sensational early reporting on the scale of Hamas crypto fundraising significantly misstated the amounts involved.”Coin Center’s Director of Communications, Neeraj Agrawal, highlighted an article which claimed that crypto “fueled Hamas’ terror attack on Israel” in its title, only to reveal within the body of the article that “cryptocurrency is still far from the largest funding source for terrorism.”Anndy Lian, a Singapore-based author and inter-governmental blockchain adviser, noted that while some countries may consider banning cryptocurrencies as a solution, this could merely drive illicit financing underground and make it more challenging to trace and halt. Lian argued that cryptocurrencies are traceable and trackable, unlike traditional fiat currencies like US dollars.

news
Loading