原子錢包駭客透過受制裁的交易所 Garantex 洗錢竊取數百萬美元

在加密錢包 Atomic Wallet 遭受 3500 萬美元的攻擊後，區塊鏈安全公司 Elliptic 聲稱攻擊者正在使用 OFAC 批准的交易所 Garantex 轉移被盜資金。 Elliptic 認為北韓駭客組織 Lazarus 執行了這次駭客攻擊。儘管因反洗錢措施不足和促進非法金融活動而受到 OFAC 制裁，但 Garantex 仍在運作。 Elliptic 報導中稱，儘管多家加密貨幣交易所已經凍結了與駭客攻擊相關的地址，但一些資金已流入 Garantex。

Atomic Wallet Hackers Launder Stolen Funds Through OFAC-Sanctioned Exchange Garantex

Atomic 錢包駭客透過 OFAC 制裁的交易所 Garantex 洗錢被盜資金

June 13, 2023

2023 年 6 月 13 日

Cybersecurity firm Elliptic has revealed that the perpetrators behind the recent $35 million hack of crypto wallet Atomic Wallet are laundering the stolen funds through Garantex, an exchange subject to sanctions by the U.S. Office of Foreign Assets Control (OFAC).

網路安全公司 Elliptic 透露，近期加密錢包 Atomic Wallet 遭受 3,500 萬美元駭客攻擊的犯罪者正在透過 Garantex 洗錢，Garantex 是一家受到美國外國資產管制辦公室 (OFAC) 制裁的交易所。

Elliptic's investigation suggests that the hack was perpetrated by the notorious North Korean hacking group Lazarus. Last year, OFAC designated Garantex as a target of sanctions, citing its weak anti-money laundering measures and facilitation of illicit financial activity. Despite the sanctions, Garantex remains operational.

Elliptic 的調查表明，這次駭客攻擊是臭名昭著的北韓駭客組織 Lazarus 所為。去年，OFAC 將 Garantex 指定為制裁目標，理由是其反洗錢措施薄弱且為非法金融活動提供便利。儘管受到製裁，Garantex 仍在運作。

In a Tuesday tweet, Elliptic reported that while several crypto exchanges have frozen addresses linked to the Atomic Wallet hack, some funds have been transferred to Garantex. The laundered funds were initially traded via the on-chain trading platform 1inch, subsequently sent to Garantex, and ultimately converted into bitcoin (BTC). The BTC was then further laundered through Sinbad, a bitcoin mixer reportedly utilized by North Korean hacking groups.

Elliptic 在周二的推文中報導，雖然幾家加密貨幣交易所已經凍結了與 Atomic Wallet 駭客攻擊相關的地址，但一些資金已轉移到 Garantex。洗錢資金最初透過鏈上交易平台1inch進行交易，隨後發送至Garantex，最終轉換為比特幣（BTC）。隨後，比特幣透過辛巴德（Sinbad）進一步洗錢，據報道，辛巴德是北韓駭客組織使用的比特幣混合器。

On June 3, nearly $35 million worth of crypto assets, including BTC, ETH, USDT, DOGE, LTC, BNB, and MATIC, were stolen from Atomic Wallet. The company acknowledged that the incident affected "less than 1% of its monthly active users" and stated that investigations were underway as of June 8.

6月3日，Atomic錢包中價值近3,500萬美元的加密資產被盜，其中包括BTC、ETH、USDT、DOGE、LTC、BNB和MATIC。該公司承認，該事件影響了“不到 1% 的月度活躍用戶”，並表示截至 6 月 8 日調查正在進行中。

The utilization of Garantex by the Atomic Wallet hackers raises concerns about the effectiveness of OFAC sanctions in deterring illicit activities in the crypto ecosystem. It also underscores the need for increased vigilance and cooperation among crypto exchanges and cybersecurity firms to combat cybercrimes and protect digital assets.

Atomic Wallet 駭客對 Garantex 的利用引發了人們對 OFAC 制裁在阻止加密生態系統中非法活動方面的有效性的擔憂。它還強調加密貨幣交易所和網路安全公司之間需要提高警覺並加強合作，以打擊網路犯罪和保護數位資產。