According to on-chain analyst Ember monitoring, Bybit hackers have been washing ETH for almost 30 hours since yesterday afternoon, and have used a large number of addresses to use Chainflip, THORChain, LiFi, DLN, eXch and other cross-chain exchange platforms to exchange 37,900 ETH (106 million USD) cross-chain into other assets (BTC, etc.). There are currently 461,491 ETH ($1.29 billion) in the Bybit hacking address, and the total ETH they stole from Bybit is 499,395 ($1.40 billion).
According to ZachXBT monitoring, the North Korean hacking group Lazarus Group operated the stolen funds of the two hacking incidents of Bybit and Phemex through the same address (0x33d057af74779925c4b2e720a820387cb89f8f65), confirming the connection between the two incidents.
SlowMist said on the X platform that the following are some details of the Bybit hackers: - The malicious implementation contract was deployed at 7:15:23 UTC 2025-02-19: 0xbDd077f651EBe7f7b3cE16fe5F2b025BE2969516; 2025-02-21 14:13:35 UTC, the attacker used three owners to sign a transaction to replace the Safe implementation contract with a malicious one: 0x46deef0f52e3a983b67abf4714448a41dd7ffd6d32d32da69d62081c68ad7882; - malicious upgrade logic is embedded in STORAGE [0x0] via DELEGATECALL: 0...
SlowMist Cosine posted on the X platform that hackers have transferred zkLend stolen funds from the Starknet network to other networks, with most of the funds flowing to the Ethereum network.
On February 8th, it was reported that hackers posted on the dark web forum, claiming to hold the login credentials of 20 million OpenAI user accounts, and began to sell them publicly. OpenAI said that it has urgently launched an investigation, and preliminary investigation evidence shows that its system has not been attacked, but users still need to be vigilant of latent risks and take necessary security measures. An anonymous hacker posted messages in Russian on the dark web forum,...
According to X user @retardmode, the official X account of the Cuban Ministry of Foreign Affairs may have promoted CUBA, a token issued by pumpfun, after being hacked. The original post has now been deleted.
On January 18th, the 12th annual Hackathon of the University of Toronto officially opened the submission DoraHacks.io developer incentive platform this weekend. This Hackathon attracted more than 500 outstanding student developers from the University of Toronto, the University of Waterloo and other top universities in Canada to sign up and complete the development of the Hackathon project within 36 hours. This Hackathon is sponsored by well-known companies such as Google DeepMind, RBC, Ubisoft, ...
"The'JustJoin 'landing page for suspected North Korean hackers has reappeared," SlowMist CISO 23pds said in a post on X.
The hacker Blockchain Bandit stole 51,000 Ethereum mainly by successfully guessing weak private keys. After being dormant for nearly two years, blockchain investigator ZachXBT said in a Telegram post on December 30 that all 51,000 Ethereum were transferred from 10 wallet addresses to the multi-signature address "0xC451D542". The funds were mainly transferred into 5,000 Ether in batches between 8:54 pm UTC and 9:18 pm UTC on December 30. Before that, the stolen funds had been in these 10 countrie...
Slow Mist Cosine wrote on X: "In the early morning, the DEXX hacker transferred another 300 ETH into the Tornado Cash mixing protocol."
According to TechCrunch, the "Lazarus Group", a North Korean hacking group, extended social engineering attacks to multinational IT companies to steal cryptocurrencies. The study found that the "Sapphire Sleet" and "Ruby Sleet" groups spread malicious software through fake recruitment and infiltrated to steal secrets, respectively. North Korean IT personnel also used false identities and technical means to infiltrate.
U.S. prosecutors have charged five people with belonging to a hacking ring that allegedly hacked into dozens of businesses and individuals to steal $11 million worth of cryptocurrency and sensitive information. The California U.S. Attorney's Office said on November 20 that the defendants sent text messages to individuals and employees of certain companies for phishing links or SIM card swaps in order to steal login credentials for their work or cryptocurrency trading accounts.
Heather'Razzlekhan 'Morgan, a money launderer in the Bitfinex hack, was sentenced to 18 months in prison and her husband, Ilya "Dutch" Lichstan, was sentenced to five years last week. The hack caused the Bitfinex exchange to lose nearly 120,000 bitcoins (worth about $9 billion at today's prices). "I am very sorry and deeply regret the choices I made," Morgan said at Monday's sentencing hearing. "I spent my time and energy on bad things instead of...