Infini, a stablecoin payment firm, lost $50 million in what appears to be an inside job.
Investigators suspect a former developer retained hidden admin access to exploit the system.
The attacker used 1 ETH from Tornado Cash to fund their wallet before draining nearly $50 million in USDC through a pre-planned contract. The stolen funds were quickly converted to DAI and then over 17,000 ETH to evade asset freezes.
Despite the breach, Infini did not halt withdrawals. Founder Christian Li assured users they would be reimbursed if necessary. Meanwhile, on-chain analyst ZachXBT linked the exploit to North Korea’s Lazarus Group, known for previous exchange hacks.
Authorities are now working to track the stolen assets, but given the attacker’s sophisticated laundering techniques, recovery remains uncertain.
The incident adds to growing concerns over security lapses in the crypto sector, following Bybit’s record-breaking $1.4 billion breach just days earlier.
A Boston federal court has shut the book on one of crypto’s longest-running fraud cases, ordering the shuttered platform My Big Coin to hand over almost $26 million.
President Javier Milei has been cleared of any ethical misconduct by Argentina’s Anti-Corruption Office after a controversial memecoin post led to investor losses topping $250 million.
ALEX Protocol, a DeFi platform built on Bitcoin’s Stacks layer, has suffered a second major breach—this time resulting in an estimated $14 million loss.
A Ukrainian man has been arrested for allegedly orchestrating a years-long cryptojacking scheme that compromised thousands of online accounts tied to a global hosting provider, authorities revealed this week.