Top

Atomic Wallet Hacker Uses Lazarus Crypto Mixer

Web3 & Enterprise·June 07, 2023, 12:27 AM

The stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.

Photo by Micha Brändli on Unsplash

 

Sinbad.io

According to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.

On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.

While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.

 

Atomic Wallet hack

The hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”

In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”

However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”

The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.

Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.

Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.

 

Crypto hacking menace

Lazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.

While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

More to Read
View All
Policy & Regulation·

Jun 02, 2025

Thailand’s SEC moves to block five exchanges to protect investors

Thailand’s Securities and Exchange Commission (SEC), an independent state agency responsible for the supervision of capital markets including the digital assets sector within the Southeast Asian nation, has moved to block five cryptocurrency exchange platforms. In a statement published by the agency to its website on Thursday, May 29, the SEC outlined that it deems the five exchanges, namely OKX, Bybit, CoinEx, XT.com and 1000X.Live, to be unauthorized crypto trading platforms.Photo by REY MELVIN CARAAN on UnsplashCountering money laundering activityIt is acting against these platforms “to protect investors” and to prevent their use for money laundering purposes. In offering services to Thai users on an unauthorized basis, the exchanges were found to be in breach of Thailand’s Digital Asset Business Act B.E. 2561 (2018). The agency has asked the Ministry of Digital Economy and Society (MDES) to take measures to block local access to these online platforms. That block will be put in place on June 28. On that basis, the SEC has advised Thai users of such platforms to proceed to remove their assets from them before that June 28 deadline.  An updated version of the Royal Decree on Measures to Prevent and Suppress Technology-related Crime, (No. 2) B.E. 2568 (2025), was introduced by the Thai government in April. It facilitated the establishment of the Committee for the Prevention and Suppression of Technological Crime.  Following practices overseasThe committee met with the MDES in April, with the parties setting out the process through which unauthorized digital asset platforms would be restricted and blocked. On that occasion, similar practices carried out in other jurisdictions within the Asian region were referred to.  In December 2023 India’s Financial Intelligence Unit (FIU) moved to block nine offshore crypto exchanges, having issued them with compliance show-cause notices.  In April 2024 the Philippines SEC requested that Google and Apple remove apps associated with global exchange Binance from the local versions of their application stores. Japan’s Financial Services Agency (FSA) similarly ordered both companies to remove apps belonging to unregistered crypto exchanges in February of this year. Back in March, the Thai SEC filed a lawsuit against Aux Cayes FinTech Co. Ltd., an OKX affiliate company. The complaint alleged that OKX had been running an unlicensed exchange in Thailand, and was filed with the Economic Crime Suppression Division of the Thai police force. The SEC outlined on March 21 that a similar criminal complaint had been filed against XT.com. It’s understood that Bybit, CoinEx and 1000X.Live have also been recipients of complaints on the same basis. Earlier this year, the Economic Crime Suppression Division considered taking action against Polymarket, a crypto-based prediction market, on the basis that the platform violated Thailand’s gambling laws, and in doing so, posing a risk to economic and social stability in Thailand. In April 2024, the SEC issued a warning to crypto exchange platforms against the use of misleading advertising, drawing their attention to the fact that advertising of that nature would potentially place those platforms in breach of regulatory guidelines. 

news
Policy & Regulation·

Aug 17, 2023

Korea and Japan Collaborate to Develop Accounting Standards for Virtual Assets

Korea and Japan Collaborate to Develop Accounting Standards for Virtual AssetsThe Korea Accounting Institute (KAI) announced today that it held a bilateral meeting yesterday with the Japanese Financial Accounting Standards Foundation (FASF) to discuss devising accounting standards for virtual assets. Among the attendees were high-level officials of the FASF, including Yasunobu Kawanishi, Chair of the Accounting Standards Board of Japan.Photo by Shubham’s Web3 on UnsplashConsensus on establishing standardsBoth parties agreed on the importance of establishing accounting standards for virtual assets. These standards should be practical and easy to follow, ensuring that they offer sufficient information to readers of financial statements.Reciprocal sharing of progressKAI is in the process of revising the Korean version of the International Financial Reporting Standards (K-IFRS) to require companies to disclose information related to virtual assets within the annotations of their financial statements. This mandatory disclosure of virtual asset-related details was announced by the Korean Financial Services Commission last month, with implementation scheduled for January of next year. This significant update was a topic of discussion in the meeting. Similarly, the FASF reciprocated by sharing its own progress and advancements.This meeting was arranged in light of the deepening relations between the two nations. The close collaboration between the two groups is poised to give Korea momentum to broaden its global presence. Moving forward, the accounting bodies of both countries are committed to continuing their cooperative efforts.

news
Policy & Regulation·

Aug 19, 2023

SEC Seeks to Question Co-Founder of Singapore’s Terraform Labs

SEC Seeks to Question Co-Founder of Singapore’s Terraform LabsThe United States Securities and Exchange Commission (SEC) has taken a step forward in its ongoing case against Singapore’s Terraform Labs by seeking to question Daniel Shin, the Co-Founder of the company.The SEC's intention is to gather evidence related to Chai Corporation, a payments company associated with Terraform and the Terra blockchain. District Judge Jed Rakoff granted the SEC’s request earlier this week, which is part of the regulatory body’s efforts to build a case against Terraform Labs and its Co-Founder, Do Kwon. The decision was based upon a motion originally filed in July.Photo by Bermix Studio on UnsplashRequesting South Korean assistanceThe motion, which was granted on Tuesday, allows the SEC to reach out to South Korea for assistance in questioning Shin and obtaining documents related to Chai Corporation. The regulatory body aims to gain insights into Kwon’s role at Chai, the utilization of the Terra blockchain by Chai, and the disclosures made by Chai regarding its relationship with Terraform.Additionally, the SEC is interested in understanding the reasons behind Chai’s separation from Terraform, as the two companies shared offices and staff until their split in 2020.No opposition filedOn a previous occasion, Kwon unsuccessfully challenged the SEC's attempt to access company records on the basis of a lack of jurisdiction given that Terraform is a Singapore-domiciled company. In June, both Terraform and Kwon attempted unsuccessfully to have the entire action thrown out.On this occasion neither Terraform Labs nor Kwon have opposed the SEC’s motion. In fact, they have even included their own set of questions and document requests. Both the Singaporean firm and its Co-Founder have denied the SEC’s allegations, which were filed earlier this year.The SEC’s lawsuit claims that Terraform’s cryptocurrencies, specifically Terra Luna Classic (LUNC) and Terra ClassicUSD (USTC), were involved in fraudulent activities. The US regulatory body further alleges that Kwon and Terraform falsely promoted the use of the Terra blockchain by Chai for processing and settling transactions.The SEC’s lawsuit also accuses Terraform and Kwon of fabricating transactions involving TerraKRW (KRT), a Korean won-pegged stablecoin, to give the impression that Chai was actively utilizing the Terra blockchain.Collapse falloutTerra, an interconnected crypto ecosystem, faced a collapse in May 2022, resulting in the loss of approximately $40 billion in value and impacting the wider cryptocurrency market. The aftermath of this collapse led to legal actions against individuals associated with Terraform Labs. South Korean prosecutors, for instance, charged Shin with multiple fraud offenses in April, alleging that he had concealed the risks of investing in Terraform’s cryptocurrencies.Kwon’s legal situation is equally complex. He is currently serving a prison sentence in Montenegro for attempting to leave the country using a fake passport. He faces criminal charges in both the United States and South Korea, and both countries have requested his extradition.The ongoing investigation sheds light on the intricate relationships within the Terra ecosystem, having an impact across different jurisdictions. As legal proceedings unfold, the outcome will likely have implications for the regulation and oversight of cryptocurrency and blockchain projects internationally.

news
Loading