North Korean-Linked Hackers Transfer Harmony Network Loot to Multiple Platforms

North Korean hacking group Lazarus Group, suspected perpetrators of the $100 million Harmony network attack, have laundered stolen funds through bridges connecting Bitcoin, Avalanche, Tron, and Ethereum blockchains. The hackers utilized Railgun, a privacy-focused crypto wallet, and converted bridged bitcoin into stablecoins USDT and USDD to obscure the trail. This laundering effort follows increased scrutiny and sanctions against coin mixing services, highlighting the evolving tactics employed by cybercriminals to convert illicit crypto into fiat currency.

North Korean-Linked Hackers Bridge Stolen Harmony Network Funds to Multiple Platforms

Blockchain forensic investigators from MistTrack have uncovered the movement of stolen funds from the $100 million Harmony network attack to the Avalanche, Tron, and Ethereum platforms. Suspicion has fallen upon the Lazarus Group, a North Korean state-sponsored hacking collective responsible for the infamous $635 million Ronin Bridge breach.

Following the initial attack, the hackers sent $63.5 million in Ethereum (ETH) to Railgun, a privacy-enhancing crypto wallet, on May 20th, 2023. This transaction was followed by further transfers to various exchanges. Subsequently, Bitcoin (BTC) was withdrawn from these exchanges, with a portion being transferred to the Avalanche network through a bridging service.

In a bid to further conceal the stolen assets, the hackers converted the bridged Bitcoin to stablecoins Tether (USDT) and USD Coin (USDD), which were then transferred to multi-chain USDT addresses on both the Ethereum and Tron networks.

This complex laundering scheme highlights the lengths to which hackers are going to evade detection and convert stolen cryptocurrencies into fiat currencies. The United States' recent sanctions against Tornado Cash, a prominent crypto mixing service, has intensified the pressure on criminals to find alternative methods to launder their ill-gotten gains.

The incident amplifies the ongoing challenges faced by blockchain platforms in safeguarding against malicious activities. According to blockchain security firm Chainalysis, crypto-related hacks resulted in the loss of over $3 billion in 2022.

The investigation into the Harmony network hack is ongoing, with law enforcement authorities collaborating with blockchain sleuths to track the movement of stolen funds and identify the perpetrators. The incident serves as a reminder of the persistent threat posed by sophisticated cybercriminals and the need for vigilance in the rapidly evolving digital asset landscape.