After making off with $35 million worth of ill-gotten crypto, the hackers who targeted Atomic Wallet earlier this month have covered their on-chain tracks using the cross-chain liquidity protocol THORChain.
- According to the crypto tracking platform MistTrack, the hacker’s address transferred 503 Ether (ETH) to THORChain over the past two days.
- Those funds were then swapped for Bitcoin (BTC) and bridged into a Bitcoin address. In addition, much of the stolen ETH was converted to BTC using the SWFT blockchain.
For example:
According to @MistTrack_io monitoring, the hacker address (0xad3c…1e44) transferred 503.08 $ETH to @THORChain in the last two days and swap for $BTC, then bridged to the BTC address (bc1q…k2xm). pic.twitter.com/Y0N7uptxg7
— MistTrack🕵️ (@MistTrack_io) June 20, 2023
- On-chain sleuth ZachXBT estimated this month that Atomic Wallet users had lost upwards of $35 million in total after receiving numerous reports from users claiming to have had their funds drained. Stolen assets included BTC, ETH, Tether (USDT), Dogecoin (DOGE), Litecoin (LTC), BNB Coin (BNB), and Polygon (MATIC).
- Blockchain analytics firm Elliptic later connected the North Korean hacking group Lazarus to the theft, after stolen funds were laundered through Sinbad.io – a coin mixer used by the group.
- The following week, hackers transferred some of the stolen assets to the Russian crypto exchange Garantex, which is sanctioned by the U.S. Treasury’s Office of Foreign Assets Control (OFAC). Before that, hackers used 1INCH to exchange their assets for USDT.
- Lazarus Group hackers have used chain-hopping numerous times to conceal funds. After the $600 million Ronin bridge hack last year, the group used the REN protocol and other CEXs to move their stolen assets over to Bitcoin.
SPECIAL OFFER (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).
PrimeXBT Special Offer: Use this link to register & enter CRYPTOPOTATO50 code to receive up to $7,000 on your deposits.
- SEO Powered Content & PR Distribution. Get Amplified Today.
- EVM Finance. Unified Interface for Decentralized Finance. Access Here.
- Quantum Media Group. IR/PR Amplified. Access Here.
- PlatoAiStream. Web3 Data Intelligence. Knowledge Amplified. Access Here.
- Source: https://cryptopotato.com/atomic-wallet-hackers-take-advantage-of-thorchain-to-hide-35m/
- :is
- $UP
- 000
- 1
- 1inch
- 20
- 500
- a
- addition
- address
- ADvantage
- After
- AI
- also
- analytics
- and
- Assets
- background
- before
- binance
- Binance Futures
- Bitcoin
- bitcoin address
- blockchain
- bnb
- BNB coin
- border
- BRIDGE
- bridge hack
- bridged
- BTC
- by
- CEXs
- claiming
- code
- Coin
- coin mixer
- color
- connected
- content
- control
- converted
- covered
- Cross-Chain
- crypto
- crypto exchange
- Days
- deposits
- Doge
- Dogecoin
- Dogecoin (DOGE)
- drained
- Earlier
- Elliptic
- end
- enjoy
- Enter
- ETH
- Ether
- Ether (ETH)
- example
- exchange
- Exclusive
- external
- Fees
- Firm
- First
- following
- For
- foreign
- Free
- from
- funds
- Futures
- Group
- hack
- hacker
- hackers
- hacking
- hacking group
- had
- Have
- Hide
- HTTPS
- in
- included
- internal
- into
- jpg
- Korean
- Last
- Last Year
- later
- Lazarus
- like
- Liquidity
- Litecoin
- Litecoin (LTC)
- lost
- LTC
- Making
- Margin
- Matic
- might
- million
- mixer
- monitoring
- Month
- move
- much
- North
- numerous
- of
- OFAC
- off
- offer
- Office
- on
- On-Chain
- Other
- over
- past
- platform
- plato
- Plato Data Intelligence
- PlatoData
- Polygon
- Polygon (MATIC)
- protocol
- Reading
- receive
- receiving
- register
- ren
- Ren Protocol
- Reports
- RONIN
- Ronin Bridge Hack
- russian
- s
- Sanctioned
- Share
- Sleuth
- solid
- some
- special
- Sponsored
- stolen
- stolen eth
- stolen funds
- swap
- Take
- targeted
- Tether
- Tether (USDT)
- that
- The
- theft
- their
- then
- this
- THORchain
- Through
- times
- to
- Total
- Tracking
- tracks
- transferred
- true
- two
- u.s.
- upwards
- USDT
- used
- users
- using
- Wallet
- was
- week
- were
- which
- WHO
- with
- worth
- year
- Your
- Zachxbt
- zephyrnet
More from CryptoPotato
Bitcoin Rangebound in Anticipation of a Major Move: The Weekly Crypto Recap
Source Node: 981996
Time Stamp: Jul 16, 2021
Is the MATIC Bull Run Over? Sell-Off Looms as Price Lingers Below Key Zone
Source Node: 2395694
Time Stamp: Nov 23, 2023
HaloDAO to Hold Anticipated Initial DEX Offering on SushiSwap MISO on June 24
Source Node: 919553
Time Stamp: Jun 14, 2021
Valkyrie Greenlit to Purchase ETH Futures for its Bitcoin, Ethereum ETFs
Source Node: 2298316
Time Stamp: Sep 29, 2023
Users in Web3 Will Do a lot More Than Just Trade Crypto: Cronos’ Ken Timsit (Interview)
Source Node: 1612918
Time Stamp: Aug 7, 2022
Did Bitcoin (BTC) Price Indeed Bottom After the Unrealistic ETF-Related Market Expectations? (Analysis)
Source Node: 2466985
Time Stamp: Feb 3, 2024
US Bank State Street to Set Up a Digital Unit Focused on Cryptocurrencies
Source Node: 913422
Time Stamp: Jun 10, 2021
The Netherlands Must Ban Bitcoin Ahead of Price Crash, Says a Dutch Official
Source Node: 915039
Time Stamp: Jun 11, 2021
Gemini Silently Laid Off Over 60 More Workers, Source Says
Source Node: 1581733
Time Stamp: Jul 18, 2022
Cardano’s Charles Hoskinson: Central Banks Will Vanish and Crypto Will Replace Them
Source Node: 891111
Time Stamp: May 31, 2021
DCG, Castle Island Ventures Lead $90 Million Round in a Crypto Security Firm
Source Node: 1585502
Time Stamp: Jul 20, 2022
Bitcoin Price Analysis: BTC at $37K But is it a Dead Cat Bounce?
Source Node: 1158582
Time Stamp: Jan 28, 2022