Latest

MistTrack: Atomic Wallet hackers used THORChain to hide stolen funds

Hackers who stole funds from the Atomic Wallet cryptocurrency used the THORChain crosschain liquidity protocol to hide the stolen funds, MistTrack analysts report.

More than 500 stolen ETH were transferred to THORChain in the past two days and then exchanged for bitcoins. According to analysts, some of the stolen ether was redirected to several bitcoin addresses using the Swft blockchain.

Last week, hackers moved some of the stolen funds to the Garantex exchange, which came under sanctions from the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) last April. Garantex itself has announced that it has blocked all accounts related to the Atomic hack and is willing to cooperate with law enforcement.

Blockchain security company Elliptic said it believes the North Korean hacker group Lazarus is behind the attack. Elliptic also noted that the losses suffered by Atomic Wallet users as a result of the hacker attack amounted to $100 million;

Earlier, Elliptic reported that crypto-assets that were stolen from Atomic Wallet wallets began to flow to Sinbad, a service popular with Lazarus Group hackers.

One of the affected Atomic Wallet users lost 1,897 ETH ($3.5 million). Also, the five largest wallets, from which hackers withdrew funds, lost a total of $ 9.7 million. The only way to protect the assets of Atomic Wallet users is to transfer funds to new addresses, and created with other software.<br