Infini, a stablecoin payment firm, lost $50 million in what appears to be an inside job.
Investigators suspect a former developer retained hidden admin access to exploit the system.
The attacker used 1 ETH from Tornado Cash to fund their wallet before draining nearly $50 million in USDC through a pre-planned contract. The stolen funds were quickly converted to DAI and then over 17,000 ETH to evade asset freezes.
Despite the breach, Infini did not halt withdrawals. Founder Christian Li assured users they would be reimbursed if necessary. Meanwhile, on-chain analyst ZachXBT linked the exploit to North Korea’s Lazarus Group, known for previous exchange hacks.
Authorities are now working to track the stolen assets, but given the attacker’s sophisticated laundering techniques, recovery remains uncertain.
The incident adds to growing concerns over security lapses in the crypto sector, following Bybit’s record-breaking $1.4 billion breach just days earlier.
A U.S. court has handed down a 30-year prison sentence to Mohammed Azharuddin Chhipa, who was found guilty of financing terrorism through cryptocurrency.
A major chapter in crypto’s legal reckoning closed this week as Alex Mashinsky, once a prominent name in digital lending, received a 12-year prison sentence.
Former Celsius CEO Alex Mashinsky is asking for a significantly reduced prison sentence ahead of his May 8 sentencing, with his legal team pushing back hard against the U.S. Department of Justice’s call for a 20-year term.
The legal battle against the creators of Samourai Wallet has taken a sharp turn, as defense attorneys accuse federal prosecutors of suppressing a key legal interpretation from the Treasury Department that could dismantle the core of the government’s case.