Share this article
Bitcoin Wallet Used by DarkSide for Ransom Payments ID'd by Elliptic
Since becoming active, the wallet has received bitcoin transactions totaling $17.5 million, the data analysis firm said.
Updated Sep 14, 2021, 12:56 p.m. Published May 14, 2021, 7:59 p.m.
The wallet used by the DarkSide ransomware group to receive bitcoin ransom payments has been identified, according to data analysis firm Elliptic, citing intelligence collection and analysis of blockchain transactions.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
- The wallet received the 75 BTC payment reportedly made by Colonial Pipeline on May 8, following the cyberattack that led to widespread fuel shortages in the U.S., Elliptic said in its report.
- The wallet has been active since early March and has received 57 payments from 21 different wallets, including some matching ransoms known to have been paid to the group in other cases of blackmail, the firm said.
- Since becoming active, the wallet has received bitcoin transactions totaling $17.5 million, Elliptic said.
- Elliptic also said it has been able to gain intel on how DarkSide laundered prior attacks, potentially allowing authorities to locate the people behind them.
- Earlier Friday, KrebsOnSecurity and others reported that the DarkSide group has decided to shut itself down after its own servers were seized and someone drained crypto from an account belonging to the group.
Read more: Ransomware Attacks Growing More Profitable: Chainalysis
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Coinbase Sees Crypto Recovery Ahead as Liquidity Improves and Fed Rate Cut Odds Climb
The crypto exchange also took note of a so-called AI bubble that continues to go strong and a weaker U.S. dollar.
What to know:
- Coinbase Institutional is seeing a potential December recovery in crypto, citing improving liquidity and a shift in macroeconomic conditions that could favor risk assets like bitcoin.
- The firm's optimism is driven by rising odds of Federal Reserve rate cuts, with markets pricing in a 93% chance easing next week, and improving liquidity conditions.
- Several recent institutional developments, including Vanguard's crypto ETF policy reversal and Bank of America's greenlighting of crypto allocations, have contributed to bitcoin's rebound from recent lows.
Top Stories
