链上侦探 ZachXBT 披露,协助疑似朝鲜黑客组织洗钱的非法人员,目前正公开在相关服务平台的 Discord 公共服务器及 Telegram 频道中寻求订单处理支持。
这批被洗资金来源于此前 Bitget 遭遇的 3.87 亿美元安全漏洞事件。
调查显示,其中一名代号为“Alias 4”的人员此前还曾参与清洗今年早些时候 Kelp DAO 遭遇攻击所损失的 2.92 亿美元资金。目前,相关资金正通过跨链桥进行多链跳跃转移,并被存入 Wasabi 等混币服务平台。
ZachXBT 表示,该洗钱模式与此前多次归属于 TraderTraitor 黑客组织的攻击手法高度一致,其一直在对这些团伙进行密切追踪,并计划在未来数周内公开更多追踪数据。
显示更多
BREAKING: Chinese illicit actors laundering funds from the $387M Bitget exploit on behalf of the alleged DPRK attackers are openly asking for support with orders in public Discord servers and Telegram channels of services they use.
Notably, Alias 4 (below) was also seen laundering funds from the Kelp DAO $292M exploit earlier this year.
I've observed the same pattern after multiple TraderTraitor attributed exploits, and I've closely tracked these groups. I plan to share more of my data on them in coming weeks.
Currently, funds are being chain-hopped via bridges and being deposited into mixing services such as Wasabi.
Alias 1 - Cc
Discord: cc02006
Discord ID: 1351486674386948148
Txn: F08657EFAEAE7B58217CD17A22BF4779582E5D080C2E92E173BC239A5D828363
Alias 2 - jack
Discord: jack_34808
Discord ID: 1553705721768714377
Txn: 68583D313A0CCC99F2702D61D05A242A69C86CAE09ED252B65F34B677C377F69
Alias 3 - Melon
Discord: under0346
Discord ID: 1394240539108573215
Txn 1: ABE2AEF8B10057E60F8259CA2CA2CD5D71D38D254960FEEE89CB3C95A964873F
Txn 2: 7BE290865901DEB1680A6D692A11392D1FDDACA0D31C48F26DCB249F2444BD6B
Alias 4 - lolo / Marin
TG: pvpcz
TGID: 6223514198
Discord: losern
Discord ID: 1024415186527985704
Txn: 8E935C19D00F40639B78BF1FD094FE48C92118F3E586AB52DF93851080CCCE15
Alias 5 - HELP ME
Discord: helpme031897
Discord ID: 1554035533817188384
Txn: 7C58CAD760EBBED54F2CA4D2146D056910B7B6688B4F524396DC8807353C2379
显示更多