Following the release of our research linking Huione Guarantee and Huione Pay to the laundering of proceeds of online scams, Tether has blacklisted a TRON address belonging to Huione Pay, freezing $29.6 million.
TNVaKWQzau7xL9bcnvLmF9KSEQkWEs4Ug8
Based on the $PLA market price at the time of the thefts, the total value of stolen tokens is $290 million. However, prior to the breaches the circulating supply was only ~577 million, and it's unlikely the hacker could realise anything close to this amount.
A further 1.59 billion $PLA tokens have been stolen from @playdapp_io - by the same exploiter who minted 200 million on Friday:
https://t.co/L35uB2znEF
@CarlaRamre83350 Yes absolutely! The above tactics are totally useless against clients who make use of our holistic screening capability for their transaction monitoring.
https://t.co/fEdN0pLiE3
1/7 The deployment of these contracts is interesting. Not only does it point to further confluence between the laundering of this hack and the Harmony hack (they did the same back in February) - it shows the importance of taking a holistic approach to transaction monitoring...
After that aforementioned Railgun run, I guess they didn't want to risk using a thing thats maybe decentralized or maybe decentralization-theatre? Esp. if it wasnt making them anon?
So, naturally, they just wrote their own contracts.
e.g. on Jan28...
https://t.co/3rkpG5xJ7P
7/7 These two tactics, swapping assets and layering complex transactions, are just two examples of typologies we have observed recently associated with Lazarus. To find more about other typologies read our newly-released Typologies Report here.
https://t.co/rna25tPwNh
6/7 After the swapping assets, Lazarus have moved through a large number of complex hops (splitting and reconsolidating), again a deliberate attempt to obfuscate their source of funds, before bridging their assets to Avalanche through the Avalanche Bridge.
After a significant and successful cross-community effort between @elliptic, many of our exchange partners and friends to freeze stolen @AtomicWallet funds, Lazarus have now turned to OFAC-sanctioned Exchange, Garantex, to trade their assets for BTC...
@CoinDesk @baydakova Affected users can reach out to @AtomicWallet at [email protected] - information will then be passed to the relevant parties for further investigation.
The $35 million stolen from @AtomicWallet users is being laundered through Sinbad - the mixer fka(?) Blender and used heavily by NK's Lazarus Group
https://t.co/UHCwfZiw8e