Infini, a stablecoin payment firm, lost $50 million in what appears to be an inside job.
Investigators suspect a former developer retained hidden admin access to exploit the system.
The attacker used 1 ETH from Tornado Cash to fund their wallet before draining nearly $50 million in USDC through a pre-planned contract. The stolen funds were quickly converted to DAI and then over 17,000 ETH to evade asset freezes.
Despite the breach, Infini did not halt withdrawals. Founder Christian Li assured users they would be reimbursed if necessary. Meanwhile, on-chain analyst ZachXBT linked the exploit to North Korea’s Lazarus Group, known for previous exchange hacks.
Authorities are now working to track the stolen assets, but given the attacker’s sophisticated laundering techniques, recovery remains uncertain.
The incident adds to growing concerns over security lapses in the crypto sector, following Bybit’s record-breaking $1.4 billion breach just days earlier.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.