FlagThis

A significant amount of cryptocurrency, totaling nearly $500 million, was stolen in 2024 through wallet drainer malware. This malware tricks users into signing malicious transactions that transfer their assets to the attacker. The attacks have targeted over 332,000 victims, indicating the scale of the threat. These attacks pose a substantial risk to crypto users and highlight the need for enhanced security measures and user education about how to avoid such scams. The rise in losses underscores the growing sophistication of cryptocurrency-related cybercrime.

The T3 Financial Crime Unit, a collaboration between TRON, Tether, and TRM Labs, has frozen over $100 million in cryptocurrency assets linked to illicit activities. This initiative involves working with global law enforcement to disrupt organized crime schemes that utilize blockchain technology for illicit transactions, highlighting the increasing efforts to combat crypto-related financial crimes.

A supply chain attack compromised versions 1.95.6 and 1.95.7 of the @solana/web3.js npm library, a critical JavaScript tool used for Solana blockchain applications. Malicious code inserted into the library could steal private keys, potentially leading to cryptocurrency theft. The compromise affected numerous applications and individual wallets, highlighting the risks of software supply chain attacks in the cryptocurrency space. Developers are urged to upgrade or downgrade the library to avoid compromise.

Larry Dean Harmon, the operator of the Helix cryptocurrency mixing service, has been sentenced to three years in prison for money laundering. Harmon’s service, which operated from 2014 to 2017, laundered over $311 million in cryptocurrency. This case highlights the challenges law enforcement faces in tracking and prosecuting cryptocurrency-related crimes. The sentencing includes a significant asset forfeiture of over $400 million, representing assets tied to Harmon’s illicit activities. This case serves as a significant development in the ongoing efforts to combat cryptocurrency money laundering and underscores the increasing scrutiny of cryptocurrency mixing services.

Ilya Lichtenstein, the individual behind the 2016 Bitfinex cryptocurrency exchange hack, was sentenced to five years in prison for money laundering by the US Department of Justice. Lichtenstein and his wife, Heather Morgan, stole over 119,000 Bitcoin, worth approximately $10.5 billion at the time of the theft. The stolen cryptocurrency was laundered through a complex network of transactions, using various techniques to obfuscate the origins of the funds. The investigation by the DOJ involved tracing the movement of the stolen Bitcoin through various exchanges and wallets, ultimately recovering a substantial portion of the stolen assets. This case highlights the evolving tactics of cybercriminals and the need for improved security measures within the cryptocurrency industry.

The North Korean hacking group TraderTraitor, also known as Jade Sleet, UNC4899, and Slow Pisces, is identified as the perpetrator behind the $308 million cryptocurrency theft from Japanese exchange DMM Bitcoin. The group, which is a cryptocurrency-focused element within the Reconnaissance General Bureau, primarily targets blockchain-related companies. The attackers used social engineering techniques to infiltrate the target. They have been known to use supply chain attacks to install malware.