Indian cryptocurrency exchange WazirX has reported a significant security breach and announced that it is currently investigating the incident, which has led to a temporary suspension of both Indian rupee (INR) and cryptocurrency withdrawals.
The exchange has communicated to its users that it is working to address the issue and will provide updates as the situation evolves. The suspension of withdrawals is a precautionary measure to safeguard user assets.
Crypto researcher ZachXBT has traced the breach back to an address linked to a known hacking group.
1/ So I began tracing the $230M+ WazirX hack back from the original exploiter address and was able to make some interesting observations. https://t.co/gLHu05sXWZ pic.twitter.com/eFRNdLtACB
— ZachXBT (@zachxbt) July 18, 2024
By analyzing token transfers through various Ethereum addresses and mixers, he suspects that the Lazarus Group, a notorious North Korean hacking collective, might be involved in the attack.
ZachXBT has also identified a KYC-verified deposit address associated with the exploit, though he notes that such accounts can be easily acquired on the black market, which may complicate the investigation.
Arkham Intelligence has confirmed that ZachXBT’s findings, including the identification of the KYC-linked address, meet the criteria for their bounty. This information will be shared with WazirX as part of their ongoing investigation into the breach.
A former National Crime Agency (NCA) officer has been sentenced to five years and six months in prison after stealing 50 BTC—now worth over £4.4 million—from a criminal investigation he was helping to lead.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.