Key Takeaways:
- •$21M stolen from SBI Crypto, funneled via Tornado Cash.
- •Implications for crypto security and laundering tactics.
- •North Korean group Lazarus suspected in the hacking.
SBI Crypto, a subsidiary of Japan's SBI Group, has faced a $21 million theft linked to the Lazarus Group, employing Tornado Cash for laundering activities as revealed by investigator ZachXBT.
This incident highlights vulnerabilities in exchange operations, particularly involving centralized control, triggering fresh scrutiny of compliance frameworks across Asia's crypto finance sector.
SBI Crypto, a subsidiary of Japan's SBI Group, recently faced a substantial security breach resulting in a loss of $21 million. These funds were allegedly laundered through Tornado Cash, a mixer linked to illegal activities.
Blockchain investigator ZachXBT uncovered the theft, attributing it to the Lazarus Group, a North Korean state-sponsored hacking collective. SBI Group has yet to release a statement regarding the breach or confirm these findings.
ZachXBT, Blockchain Researcher, “Tracked suspicious outflows from SBI Crypto addresses to five exchanges and Tornado Cash. Attack vector matches prior North Korea-linked methods. Multiple asset types, highly sophisticated laundering chain.”
The theft has had an immediate impact on SBI Group's reputation, highlighting vulnerabilities in its cryptocurrency infrastructure. The incident has reignited concerns over the industry's security protocols.
This breach exposes the need for enhanced risk management and compliance measures within crypto platforms. It underscores the persistent threat posed by state‑sponsored hacking groups like Lazarus.
Industry stakeholders are concerned about the recurring use of mixing services such as Tornado Cash in laundering operations. They point to a pattern of similar methods used in past breaches.
Experts suggest this incident could lead to stricter regulatory measures, especially concerning mixed services. The involvement of Layer 1 assets like Bitcoin and Ethereum highlights their attractiveness to cybercriminals for high‑value thefts.