Share this article

Atomic Wallet Hackers Use THORChain to Conceal Stolen $35M Funds

The hackers, believed to be North Korean hacking group Lazarus, have been using cross-chain bridges and liquidity protocols to mix stolen funds.

Updated Jun 20, 2023, 12:21 p.m. Published Jun 20, 2023, 10:55 a.m.
jwp-player-placeholder

Hackers that targeted crypto wallet Atomic Wallet in a $35 million heist earlier this month have used cross-chain liquidity protocol THORChain to conceal their ill-gotten gains, according to blockchain sleuth MistTrack.

MistTrack states that 503.08 ether , or around $870,000, connected to the hack was transferred to THORChain in the last two days before being swapped for bitcoin .

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Some of the stolen ether was also bridged to multiple bitcoin addresses using the Swft blockchain, MistTrack said.

Last week, the hackers moved a portion of stolen funds to crypto exchange Garantex, which was sanctioned by the Office of Foreign Assets Control (OFAC) of the U.S. Treasury last April.

Blockchain security firm Elliptic said that it believes North Korean hacking group Lazarus are behind the attack.

THORChain's native token (RUNE) remains stable following the string of hack-related transactions, it trades at 84 cents having risen slightly in the past 24-hours, according to CoinMarketCap.



More For You

KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market

16:9 Image

KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.

What to know:

  • KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
  • This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
  • Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
  • Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
  • Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.

Higit pang Para sa Iyo

Coinbase CEO says Big banks now view crypto as an ‘existential’ threat to their business

Brian Armstrong and Larry Fink (David Dee Delgado/Getty Images)

Brian Armstrong returns from World Economic Forum with message: traditional finance is taking crypto seriously

Ano ang dapat malaman:

  • Coinbase CEO Brian Armstrong said a top executive at one of the world’s 10 largest banks told him crypto is now the bank’s “number one priority” and an “existential” issue.
  • At Davos, Armstrong highlighted tokenization of assets and stablecoins as major themes, arguing they could broaden access to investments for billions while threatening to bypass traditional banks.
  • He described the Trump administration as the most crypto-forward government globally, backing efforts like the CLARITY Act, and predicted that AI agents will increasingly use stablecoins for payments outside conventional banking rails.