Axie Infinity: US Ties North Korean Hacker Group Lazarus to Major Crypto Theft

Millions of dollars' worth of cryptocurrency was stolen from popular online game Axie Infinity.

By Reuters | Updated: 15 April 2022 11:07 IST

Axie Infinity: US Ties North Korean Hacker Group Lazarus to Major Crypto Theft

A blockchain network said digital cash worth $615 million was stolen on March 23

Highlights

US warned those transacting with the wallet risk exposure to sanctions
Analytics firms said the designation confirmed North Korea's involvement
FBI had attributed the hack to the Lazarus Group

The US has linked North Korean hackers to the theft of hundreds of millions of dollars' worth of cryptocurrency tied to the popular online game Axie Infinity, the US Treasury Department said on Thursday.

Ronin, a blockchain network that lets users transfer crypto in and out of the game, said digital cash worth almost $615 million (roughly Rs. 4,710 crore) was stolen on March 23.

No one has explicitly assigned blame for the hack, but on Thursday the US Treasury identified a digital currency address used by the hackers as being under the control of a North Korean hacking group often dubbed "Lazarus."

Ukrainian in Poland Withdraws Cash Within Minutes of BTC Transfer: Here's How

"The United States is aware that the DPRK has increasingly relied on illicit activities – including cybercrime – to generate revenue for its weapons of mass destruction and ballistic missile programs as it tries to evade robust US and UN sanctions," a Treasury Department spokesperson said, using the initials of North Korea's official name.

The spokesperson warned that those transacting with the wallet risk exposure to US sanctions.

Blockchain analytics firms including Chainalysis and Elliptic said the designation confirmed that North Korea was behind the break-in.

Wikimedia Community Votes Against Crypto Donations: Here’s Why

A person familiar with the matter confirmed that North Korean hackers had been the focus of the cybersecurity firm's investigation for the past couple of weeks.

CrowdStrike, which was hired by Sky Mavis to investigate the breach, also declined comment.

Aleksander Larsen, the co-founder of Sky Mavis, which makes Axie Infinity, declined comment.

A post on the official Ronin blog said that the FBI had attributed the hack to the Lazarus Group and that the US Treasury Department has sanctioned the address that received the stolen funds.

The United States says the Lazarus hacking group is controlled by the Reconnaissance General Bureau, North Korea's primary intelligence bureau. It has been accused of involvement in the "WannaCry" ransomware attacks, hacking of international banks and customer accounts, and the 2014 cyber-attacks on Sony Pictures Entertainment.

The United States is pushing the UN Security Council to blacklist the Lazarus Group and freeze its assets, according to a draft resolution reviewed by Reuters on Wednesday.

Hacks have long plagued crypto platforms. The Ronin hack was one of the largest cryptocurrency heists on record.

Sky Mavis said it would use a combination of its own balance sheet funds and $150 million (roughly Rs. 1,148 crore) raised from investors including Binance to reimburse the lost money.

"We are still in the process of adding additional security measures before redeploying the Ronin Bridge to mitigate future risk," the Ronin blog said. "Expect the bridge to be deployed by end of month."

The Treasury spokesperson said Washington will look to publish crypto cybersecurity guidelines to aid in the effort to protect against stolen virtual currency.

Why are they still making more Harry Potter? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.