New revelations have surfaced regarding two significant crypto heists that occurred earlier this year, involving the theft of $292 million from the KelpDAO bridge in April and a private key theft at Humanity Protocol in June. On-chain analysis from blockchain analyst Specter suggests that these two incidents might be related, as funds from both breaches appear to have been funneled into shared digital wallets, indicating a possible unified money laundering scheme.
Money Laundered on Blockchains?
Indeed, evidence suggests the suspect responsible for the Humanity Protocol attack directed an astonishing 15,403 ETH, equivalent to approximately $23.6 million, into a newly established Ethereum account. This Ethereum was then seamlessly transitioned onto the Bitcoin network and intermingled with funds associated with the KelpDAO hack. Researchers noted that this approach is notably similar to tactics frequently used by the infamous Lazarus Group.
Gathering funds from different attacks into common Bitcoin wallets and then funneling them through mixers and over-the-counter transactions is a method frequently seen in operations tied to the Lazarus Group.
What Happened at KelpDAO?
During the breach of KelpDAO, cybercriminals exploited the RPC nodes of LayerZero Labs and executed a simultaneous DDoS attack. This manipulation enabled them to bypass the Ethereum bridge contract and illicitly release substantial amounts of rsETH without triggering the expected chain interactions. The Arbitrum Security Council acted swiftly to seize more than 30,000 ETH from the syndicate’s network while KelpDAO’s emergency protocol also prevented a larger calamity.
Analysis of these incidents has unveiled the consistent involvement of North Korea-backed entities, specifically within the Humanity Protocol breach. As outlined by Quantstamp’s June analysis, a phishing attack led to the compromise of a company executive’s credentials, resulting in the unauthorized manipulation and release of $H tokens, severely impacting their market price.
- Connections between KelpDAO and Humanity Protocol heists suggest coordinated action.
- Lazarus Group tactics detected in operational patterns.
- Legal and governance challenges complicating asset recovery.
- Arbitrum takes steps for facilitating asset reclamation through community vote.
While more intricate details continue to unfold, these events cast a spotlight on the vulnerabilities and complexities posed by cross-network transactions. As legal proceedings persist, the intricacies of recovering stolen crypto assets remain a daunting undertaking, highlighting the challenges in navigating justice and technology’s intersection in this new age of cybersecurity threats.
