$12 Million Crypto Heist: How Lazarus Group Sidesteps Sanctions with Tornado Cash

Last Updated on March 15, 2024

Efe Headshot
Written by

Key Takeaways:

  • North Korea’s Lazarus Group has laundered $12 million through Tornado Cash, a crypto mixer, despite being under international sanctions.
  • The laundered funds originated from sophisticated hacks on the HTX exchange and its cross-chain bridge, HECO, in November, with a combined theft of over $116 million.
  • Despite U.S. sanctions against Tornado Cash for facilitating over $1 billion in money laundering, its decentralized nature allows it to continue operations, challenging regulatory efforts to combat crypto laundering.

Despite facing international sanctions, North Korea’s notorious Lazarus Group has ingeniously navigated the complexities of the crypto world to launder a staggering $12 million.

This sum, derived from illicit activities, found its way through the murky waters of Tornado Cash, a crypto mixer that has itself been in the eye of regulatory storms.

The journey of these ill-gotten gains began with a sophisticated attack on the cryptocurrency exchange HTX and its interconnected network, the HTX Eco Chain (HECO), back in November.

The assault resulted in a hefty haul of $30 million from HTX and an additional $86.6 million from HECO. The attackers didn’t rest on their laurels; they converted their booty into Ether through decentralized exchanges, laying low until now.

Tornado Cash, a platform that prides itself on decentralization and non-custodial privacy, became the final destination for this sizeable sum.

Built atop the Ethereum blockchain, Tornado Cash uses a blend of smart contracts to obscure the origins of cryptocurrency, allowing deposits from one address to be withdrawn by a completely different one.

Ethereum symbol

This functionality has made it a haven for those seeking privacy but, simultaneously, a magnet for controversy due to its alleged role in laundering over $1 billion linked to various criminal activities, including those attributed to the Lazarus Group.

The U.S. Treasury Department’s sanctions in August 2022, aimed at curtailing Tornado Cash’s operations due to its purported facilitation of money laundering, have done little to stymie its utility to the Lazarus Group.

The sanctions’ effectiveness is hampered by the decentralized nature of blockchain technology, which ensures that Tornado Cash’s operations remain beyond the reach of traditional regulatory mechanisms.

This isn’t the first rodeo for the Lazarus Group in the world of crypto laundering.

Flow of funds from HTX HECO hacks to Tornado Cash by Elliptic
Flow of funds from HTX HECO hacks to Tornado Cash by Elliptic

With the recent crackdown on crypto mixers like Sindbad and Blender, the group has had to pivot back to old reliables like Tornado Cash.

These mixers, essential tools in the cybercriminal’s arsenal for obscuring the trail of digital currencies, have increasingly become targets of law enforcement agencies worldwide.

The ongoing battle between cybercriminals and regulators took a more personal turn with the legal actions against developers associated with Tornado Cash.

Charges have been leveled against key figures behind the mixer, highlighting the growing resolve of authorities to clamp down on the digital underbelly of crypto laundering.

This saga serves as a stark reminder of the persistent vulnerabilities within the cryptocurrency ecosystem and the lengths to which groups like Lazarus will go to exploit them.

As the digital age advances, the cat-and-mouse game between cybercriminals and regulators continues to evolve, underscoring the need for robust, innovative solutions to safeguard the integrity of the crypto space.

About The Author

Efe Headshot
Written by

News Reporter

Efe Bravo, a seasoned journalist, delivers compelling insights into the cryptocurrency and blockchain industry.

His articles offer a deep dive into the latest trends, projects, and technological advancements shaping the future of digital finance.

Check Efe out on: