Share this article
Atomic Wallet Hackers Use THORChain to Conceal Stolen $35M Funds
The hackers, believed to be North Korean hacking group Lazarus, have been using cross-chain bridges and liquidity protocols to mix stolen funds.
Updated Jun 20, 2023, 12:21 p.m. Published Jun 20, 2023, 10:55 a.m.
Hackers that targeted crypto wallet Atomic Wallet in a $35 million heist earlier this month have used cross-chain liquidity protocol THORChain to conceal their ill-gotten gains, according to blockchain sleuth MistTrack.
MistTrack states that 503.08 ether , or around $870,000, connected to the hack was transferred to THORChain in the last two days before being swapped for bitcoin .
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
Some of the stolen ether was also bridged to multiple bitcoin addresses using the Swft blockchain, MistTrack said.
Last week, the hackers moved a portion of stolen funds to crypto exchange Garantex, which was sanctioned by the Office of Foreign Assets Control (OFAC) of the U.S. Treasury last April.
Blockchain security firm Elliptic said that it believes North Korean hacking group Lazarus are behind the attack.
THORChain's native token (RUNE) remains stable following the string of hack-related transactions, it trades at 84 cents having risen slightly in the past 24-hours, according to CoinMarketCap.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
JPMorgan Pushes Deeper Into Tokenization With Galaxy's Debt Issuance on Solana
Galaxy’s onchain debt deal, where JP Morgan acted as arranger, was settled in USDC stablecoin and backed by Coinbase and Franklin Templeton.
What to know:
- J.P. Morgan arranged Galaxy Digital’s commercial paper issuance on the Solana blockchain, one of the first of its kind in the U.S.
- Coinbase and Franklin Templeton bought the short-term debt instrument, settled in USDC
- Tokenization of real-world assets is gaining traction, with projections suggesting the market could reach $18.9 trillion by 2033.
Top Stories
