North Korea-affiliated Lazarus Group behind CoinX hack: Report
North Korea’s notorious state-backed Lazarus Group is believed to be behind the $55 million hack of crypto exchange CoinX. According to the latest update from leading on-chain spy ZachXBT, attackers “accidentally” linked their address to the $41 million hack of betting platform Stake.com.
Just one day after the exploit, the investigator flagged an Ethereum wallet address that was likely owned by the attackers of both CoinEx and Stake.com, meaning the same group was responsible for carrying out this exploit.
- The wallet in question, which received funds from the recently hacked betting platform, interacted with the address that had received funds withdrawn from CoinEx, ZacksBT. noted,
- The US Federal Bureau of Investigation (FBI) previously confirmed that the North Korea-affiliated Lazarus Group was responsible for the theft of $41 million from Stake.com.
- Following multiple alerts of the breach by on-chain investigators, CoinX confirmed that its risk control systems had detected unusual withdrawals from several hot wallet addresses used to store exchange assets.
- CoinEx has temporarily halted deposits and withdrawals as it investigates the hack that occurred across three different blockchains – Ethereum, Tron and Polygon – and involved a variety of tokens.
- Initially, the estimated amount of the hack was $28 million. However, Slow Mist’s security platform spreadsheets later revealed that the actual amount stolen had increased to approximately $55 million.
- CoinX has announced that it will provide a “comprehensive report” and detailed timeline of the hack.
- In the same statement, the crypto exchange also promised to compensate the losses of all affected users.
Special Offer (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and get $100 free and 10% off fees on Binance Futures your first month. (terms).
PrimeXBT Special Offer: Use this link to register and enter code CRYPTOPOTATO50 to receive up to $7,000 on your deposits.
source: cryptopotato.com