North Korean hackers cash out hundreds of millions from $1.5bn ByBit hack
Hackers thought to be working for the North Korean regime have successfully cashed out at least $300m (£232m) of their record-breaking $1.5bn crypto heist.
The criminals, known as Lazarus Group, swiped the huge haul of digital tokens in a hack on crypto exchange ByBit two weeks ago.
Since then, it's been a cat-and-mouse game to track and block the hackers from successfully converting the crypto into usable cash.
Experts say the infamous hacking team is working nearly 24 hours a day - potentially funnelling the money into the regime's military development.
"Every minute matters for the hackers who are trying to confuse the money trail and they are extremely sophisticated in what they're doing," says Dr Tom Robinson, co-founder of crypto investigators Elliptic.
Out of all the criminal actors involved in crypto currency, North Korea is the best at laundering crypto, Dr Robinson says.
"I imagine they have an entire room of people doing this using automated tools and years of experience. We can also see from their activity that they only take a few hours break each day, possibly working in shifts to get the crypto turned into cash."
Elliptic's analysis tallies with ByBit, which says that 20% of the funds have now "gone dark", meaning it is unlikely to ever be recovered.
The US and allies accuse the North Koreans of carrying out dozens of hacks in recent years to fund the regime's military and nuclear development.
On 21 February the criminals hacked one of ByBit's suppliers to secretly alter the digital wallet address that 401,000 Ethereum crypto coins were being sent to.
ByBit thought it was transferring the funds to its own digital wallet, but instead sent it all to the hackers.
Ben Zhou, the CEO of ByBit, assured customers that none of their funds had been taken.
The firm has since replenished the stolen coins with loans from investors, but is in Zhou's words "waging war on Lazarus".
ByBit's Lazarus Bounty programme is encouraging members of the public to trace the stolen funds and get them frozen where possible.
All crypto transactions are displayed on a public blockchain, so it's possible to track the money as it's moved around by the Lazarus Group.
If the hackers try to use a mainstream crypto service to attempt to turn the coins into normal money like dollars, the crypto coins can be frozen by the company if they think they are linked to crime.
So far 20 people have shared more than $4m in rewards for successfully identifying $40m of the stolen money and alerting crypto firms to block transfers.
But experts are downbeat about the chances of the rest of the funds being recoverable, given the North Korean expertise in hacking and laundering the money.
"North Korea is a very closed system and closed economy so they created a successful industry for hacking and laundering and they don't care about the negative impression of cyber crime," Dr Dorit Dor from cyber security company Check Point said.
Another problem is that not all crypto companies are as willing to help as others.
Crypto exchange eXch is being accused by ByBit and others of not stopping the criminals cashing out.
More than $90m has been successfully funnelled through this exchange.
But over email the elusive owner of eXch - Johann Roberts - disputed that.
He admits they didn't initially stop the funds, as his company is in a long-running dispute with ByBit, and he says his team wasn't sure the coins were definitely from the hack.
He says he is now co-operating, but argues that mainstream companies that identify crypto customers are abandoning the private and anonymous benefits of crypto currency.
North Korea has never admitted being behind the Lazarus Group, but is thought to be the only country in the world using its hacking powers for financial gain.
Previously the Lazarus Group hackers targeted banks, but have in the last five years specialised in attacking cryptocurrency companies.
The industry is less well protected with fewer mechanisms in place to stop them laundering the funds.
Recent hacks linked to North Korea include:
The 2019 hack on UpBit for $41m
The $275m theft of crypto from exchange KuCoin (most of the funds were recovered)
The 2022 Ronin Bridge attack which saw hackers make off with $600m in crypto
Approximately $100m in crypto was stolen in an attack on Atomic Wallet in 2023
In 2020, the US added North Koreans accused of being part of the Lazarus Group to its Cyber Most Wanted list. But the chances of the individuals ever being arrested are extremely slim unless they leave their country.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
5 hours ago
- Yahoo
Exclusive: Polygon co-founder Sandeep Nailwal says ‘no plans' for ETF, slams premature filings
Exclusive: Polygon co-founder Sandeep Nailwal says 'no plans' for ETF, slams premature filings originally appeared on TheStreet. As the crypto market sees a flurry of exchange-traded fund (ETF) filings following the greenlight for Bitcoin and Ethereum ETFs, Polygon co-founder Sandeep Nailwal says the network has no intention of joining the rush — at least not anytime soon. 'Most of the crypto companies are filing for these ETFs, while most of them know that it's not going to be approved for the next 3-4 years,' Nailwal said in a conversation with TheStreet Roundtable's Senior Editor Mehab Qureshi. 'They are not that decentralized, they are not that trustless and all that.' Rather than spending millions in lobbying and legal fees to push for a token-backed ETF, Nailwal said Polygon's strategy is to focus on product development and user growth. The U.S. Securities and Exchange Commission (SEC) is currently reviewing over 70 crypto-related ETF filings, signaling a growing appetite among asset managers to offer regulated exposure to altcoins. Following the landmark approvals of spot Bitcoin ETFs in January 2024 and spot Ethereum ETFs in May 2024, firms have expanded their focus beyond the top two cryptocurrencies. Now, new filings include applications for ETFs tied to Solana (SOL), XRP, Cardano (ADA), Avalanche (AVAX), Dogecoin (DOGE), Litecoin (LTC), and even Tron (TRX). 'When the asset is ready, the market actually automatically goes forward,' Nailwal said. 'I would want to take Polygon's fundamental interaction to a place where a large ETF provider reaches out to us automatically. Instead of we paying millions of dollars that, we'll go and buy our ETFs.' His remarks come amid growing optimism in the crypto industry after the approval of Ethereum ETFs and the launch of dozens of filings from smaller firms, many betting on future regulatory clarity under the Trump administration. But Nailwal says filing for an ETF prematurely could be a distraction. 'I don't want to spend any of that. I better focus my efforts on getting the fundamental traction of users,' he said. 'And then the ETFs and the markets will push forward.' In the same conversation, Nailwal also addressed concerns around Ethereum's stagnating price action and declining narrative dominance. 'There was a narrative violation for Ethereum that maybe Ethereum was not the L1,' he said, referring to the rise of other layer-2 execution environments that pulled attention away from Ethereum's core value. 'But if you see in terms of the value, I think still around 80 to 90 percent of all the value created in crypto exists on Ethereum,' he added. 'Ethereum powers the settlement for the security and the subvention for hundreds and hundreds of these layer-1 chains.' Nailwal acknowledged that questions remain about how ETH as an asset accrues value, but emphasized the broader ecosystem remains robust. While Polygon is open to re-evaluating its ETF stance depending on macroeconomic changes, Nailwal said it will take more than market noise to move the needle. 'If the Fed pivots and the rates start going down… and then we start seeing a lot of demand on the ETF side. Sure, we might look into that,' he said. 'But as of now, [we] will be completely focused on our products.' Exclusive: Polygon co-founder Sandeep Nailwal says 'no plans' for ETF, slams premature filings first appeared on TheStreet on Jun 2, 2025 This story was originally reported by TheStreet on Jun 2, 2025, where it first appeared.
Yahoo
7 hours ago
- Yahoo
$50K bond for man accused of doing donuts in stolen car downtown
MEMPHIS, Tenn. — A man accused of driving recklessly in downtown Memphis in a stolen car while in possession of drugs and a stolen gun was granted a $50,000 bond Monday. Gavin Robinson, 28, was arrested early Sunday morning at Union and Fourth Street, where police said he was doing donuts in a stolen black Charger near pedestrians. MPD said they received a complaint about several vehicles driving recklessly at that location. Officers said when they arrived on the scene, they saw a black 2021 Dodge Charger revving the engine and traveling in a circular motion, accelerate, lose traction, and nearly hit other vehicles. Police deployed stop sticks and said Robinson bailed out of the Charger after it became disabled. Agency 'optimistic' for new grocery north of downtown He was arrested while allegedly attempting to flee the scene on foot. The Charger came back as stolen from Atoka, Tennessee. According to police, an anonymous tipster reported seeing Robinson throw a black backpack near a dumpster. Officers located the backpack and said it contained money, cocaine, fentanyl, and a scale. Police said they also found a Glock 17 handgun next to the backpack, which was stolen. Robinson was charged with two counts of theft of property, reckless driving, possession of a controlled substance, possession of a firearm during the commission of a dangerous felony, and evading arrest. He is set to appear in court on Tuesday. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Yahoo
8 hours ago
- Yahoo
Fed Chair Powell reveals new inflation target
Fed Chair Powell reveals new inflation target originally appeared on TheStreet. The crypto market took a breather on Monday, as Bitcoin and major altcoins showed minor declines over the past 24 hours. Federal Reserve Chair Jerome Powell unveiled the central bank's monetary policy framework for 2025 Monday morning. "It remains critical that the Fed understand the policies and practices of other governments and central banks, and their implications for the U.S. economy and financial markets. Exchange rate policy, of course, is now firmly in the hands of the U.S. Treasury," said Fed Chair Jerome Powell. The framework was reviewed with the understanding that significant changes have occurred in the economy since the Fed's previous major reevaluation in 2020, and that the Fed must recalibrate its strategies, tools, and communications. "Understanding global trade and capital movements has only grown in importance since 1950, as we saw during the pandemic. The IF division helps produce the data on international capital flows, and has spent decades researching the effects of these flows and international trade on U.S. and foreign economies. Understanding this complex and interconnected web is essential for us to anticipate the path of employment and inflation", added Powell. On May 16, Powell pointed to the 2020 framework, created during a period of low inflation and low interest rates, as no longer relevant, as the pandemic had distorted all economic norms. The Fed's assurance that it would allow inflation to moderately "overshoot 2%", he acknowledged, became "irrelevant," as inflation spiked globally and the Fed had to raise rates 525 basis points in 16 months. Powell reiterated the Fed's commitment to a 2% inflation target, calling anchored inflation expectations "critical to everything" the Fed plans to do. 'While academics and market participants generally have viewed the FOMC communications as effective, there is always room for improvement. Indeed, clear communication is an issue even in relatively placid times. A critical question is how to foster a broader understanding of the uncertainty that the economy generally faces in periods with larger, more frequent, or more disparate shocks,' said Powell. The U.S. Federal Reserve's unprecedented monetary and fiscal stimulus in 2020–21 helped fuel a massive crypto boom, driving Bitcoin and Ethereum to all-time highs in late 2021. However, rising inflation in 2022 prompted the Fed to tighten policy, resulting in a nearly $2 trillion decline in total crypto market value and a roughly 70% drop in Bitcoin's price. Crypto markets rebounded and stabilized in 2023, signaling renewed confidence and increased risk appetite. According to Bankrate, most investors look for lower interest rates. Many proponents of the cryptocurrency market believe, to their dismay, that it is often affected by the Fed's moves and monetary policies. It remains to be seen which way the crypto market swings, with new upcoming policies. However, as of the time of writing, Bitcoin is trading at $104,220, down 1.03% on the day but still up 8.25% for the month, according to Kraken. Ethereum dropped 0.16% to $2,538, but remains the leading large-cap cryptocurrency over the last 30 days, showing a 38.58% gain. Fed Chair Powell reveals new inflation target first appeared on TheStreet on Jun 2, 2025 This story was originally reported by TheStreet on Jun 2, 2025, where it first appeared. Sign in to access your portfolio
