Hackers who drained around $625 million from the Ronin Bridge attack in March have transferred funds from Ethereum to the Bitcoin network using privacy tools. In order to hide their identity, cybercriminals, who are believed to be part of the North Korean cybercrime group, Lazarus, used the Ren protocol, mixers, and several centralized exchanges to move funds from one blockchain to another.
₿liteZero, a blockchain investigator, developer, and major contributor to SlowMist’s mid-year Blockchain Security report, tracked those stolen funds. It outlined the funds’ movement after March 23 after the exploit and noted that stolen funds are now converted into Bitcoins anonymously.
Related Reading: Crypto Exchange FTX Revenue Reportedly Balloons 1,000% To Over $1 Billion In 2021
₿liteZero noted in a tweet;
I’ve been tracking the stolen funds on Ronin Bridge. I’ve noticed that Ronin hackers have transferred all of their funds to the bitcoin network. Most of the funds have been deposited to mixers(ChipMixer, Blender).
After getting access to the $625 worth of USDC and Ethereum, hackers moved funds to Tornado Cash in an effort to hide from authorities. Tornado is an Ethereum-based virtual currency tumbler that mixes crypto transactions and provides access with specific keys to individuals.
As it was not the end of the process to obscure the transactions, hackers used several crypto exchanges and a network bridge after withdrawing funds from Tornado cash. Investigator revealed in the Twitter thread that Ronin hackers circulated funds from Binance, Huobi, and FTX before sending the funds into the North Korean mixer, Blender.
As per the ₿liteZero findings, just a portion of the stolen asset, or 6,249 ETHs, have appeared to be converted into Bitcoins, with Huobi receiving 5,028 ETHs and FTX 1,219 ETHs. Then, hackers sent 439 BTC (20.5 million) to the Bitcoin privacy tool Blender.
The analyst added;
I’ve found the answer in Blender sanction addresses. Most Blender sanction addresses are Blender’s deposit addresses used by Ronin hackers. After withdrawing from the exchanges, they have deposited all their withdrawal funds to Blender.
Interestingly, the ₿liteZero report comes after U.S. Treasury imposed sanctions on the mixer tool Blender on May 06, accusing the firm of assisting North Korean hackers in processing 20.5 million stolen funds. This figure of withdrawn amount from exchanges by cybercriminals is constant with the facts provided by ₿liteZero(20.72).
In addition, the hackers bridged the rest of the assets with the Bitcoin network using the renBTC protocol. The investigator explained hackers used Uniswap or 1inch to convert the funds into renBTC.
Since the Ren protocol came into existence, it opened the way for money laundering actors around the globe as it paved the way to convert an asset from Ethereum to a Bitcoin network.
Then again, after converting and passing funds from several platforms, they used a mixer like ChipMex or Blenders. Funds are relocated to ChipMixer before withdrawing some amount from Blender.
Related Reading: Bitcoin Scam Called ‘Pig Butchering’ Grows Alarmingly Popular
The ₿liteZero ended up noting that more complex things may come out as the research team is currently analyzing the hackers.
Featured image from Pixabay and chart from TradingView.com
Enjin recently executed a colossal migration of over 200 million NFTs from Ethereum and a sidechain to its proprietary Enjin Blockchain. This move, highlighted by Atlas Development Services executive Oscar Franklin Tan, aimed to circumvent steep gas fees typically associated with such large-scale transfers, employing a novel approach for the migration process.
JoyCoinbase's Project Diamond introduces a groundbreaking platform, leveraging blockchain technology to transform institutional digital asset management and bridge the gap between traditional and digital finance.
YouQuanMicrosoft's Phi-2, a compact AI model, challenges larger counterparts with its efficient performance and potential for widespread, accessible applications.
YouQuanEl Salvador's Freedom Visa, drawing global crypto elite with a $1 million fee, has amassed $153 million in a week, driving economic growth through strategic investments and Bitcoin-backed bonds.
Hui XinRhysida has targeted Insomniac Games, the developers behind renowned titles like Spider-Man 2 and Ratchet & Clank, with a ransomware attack. The attack involves a demand for a ransom of 50 Bitcoins, equivalent to over $2 million.
JoySwarm's Open dOTC platform innovatively enables tokenised trading of real-world assets, blending DeFi efficiency with regulatory compliance, marking a new era in asset tokenisation.
YouQuanAustralian and Californian individuals face DOJ charges for a $25-million AI-driven crypto Ponzi scheme, involving false promises, fund diversion for personal expenses, and efforts to conceal investments under different names.
Hui XinUS authorities have seized around $500,000 in digital currency from a Chinese national implicated in a pig-butchering crypto scam. The ongoing case highlights law enforcement's adaptability in addressing crypto fraud challenges, emphasizing the need for stronger regulations to protect investors.
JoyAmidst market fluctuations, XRP demonstrates resilience and potential for growth, maintaining a steady uptrend in a challenging crypto landscape.
YouQuanInsomniac Games, developer of Spider-Man 2, faces a Bitcoin ransom demand, raising concerns of potential data release unless 50 BTC is paid within seven days, causing tension in both gaming and cryptocurrency communities.
Hui Xin