Skip to content

Latest commit

 

History

History
85 lines (43 loc) · 2.5 KB

misc_august_september_2021.md

File metadata and controls

85 lines (43 loc) · 2.5 KB

Misc August-September 2021 Hacks

Amount Stolen:: $2,000,000

Date: August-September 2021

SpookySwap LP

Date:: September 25th, 2021

Links into Finnexus, et al.

TECH Holder

Date:: September 2nd, 2021 Amount Stolen:: $146,000

  • 0xc35a06d02471acc48e552e99d8b860bac73cbe9d

  • 0x5271b379f3e1954e20791142d734596a3de28efd

LINA Hack

Date:: August 6th, 2021 Amount Stolen:: $935,000

  • 0x1c29d38f6669acf0ba49c837e3188f9ab2a0f374 - Victim

  • 0x5271b379f3e1954e20791142d734596a3de28efd - Direct Theft

  • 0x40d7b7a55dd51ee94a9a4788311e39cb362fe1ea

Adjancent Dust

  • 0x190b71ecffeb8bcde68be86bc959e06baddaea6a - BSC

  • 0x190b71ecffeb8bcde68be86bc959e06baddaea6a - ETH

  • 0xb1ce2ec002801ec2d8d16c261eef4332c5bb45ee - ETH

  • 0xaa87866248dda3f73076b26334a18b253c2f8195 - ETH

  • 0x190b71ecffeb8bcde68be86bc959e06baddaea6a - BASE December 2024

Details

"August and September 2021 saw multiple individuals hacked for $2M likely due to private key compromise. Indicators of the thefts include on-chain connections to known hacks such as FinNexus, assets transferred out from victims wallets and immediately sold for ETH, and activity in victims wallets stop after transfers were made."

"Funds from the multiple thefts consolidated in 0x5271 before 581 ETH was deposited to Tornado Cash on September 15, 2021 beginning at 10:13 am UTC."

"591 ETH was withdrawn from Tornado Cash to a single address on September 20, 2021 beginning at 12:20 am UTC."

"The $2M withdrawn from the mixer is transferred to an intermediary address before consolidating with funds from other Lazarus Group thefts and deposited to exchanges. Comfort is gained the demix is accurate as the Paxful deposit address 0x246 links the Tornado Cash withdrawals to the deposits."

—zachxbt

Onchain

  • 0x5271b379f3e1954e20791142d734596a3de28efd - Theft
  • 0xc35a06d02471acc48e552e99d8b860bac73cbe9d - Theft
  • 0x40d7b7A55dd51ee94A9a4788311e39CB362Fe1Ea - Theft
  • 0x5b24da735fd5835ec5afb5abf9f3e89270e609c8 - TC Output
  • 0x246569f8b420c8d850c475c53d0d59973b3f08fc - Paxful Deposit

Connections

Bondly Finance Exploiter 0x2ee6f063e99d93fdf2f276b24cfe982f570ae5df ->

  • 0x78e3b85d827dcf00fc348f8bceef7b4fcfecc7fc ->
  • 0x1f098091c1bf31e8aa919db07a6e084b70c74bc9 ->
  • 0x9fd8ef7e3867e962b401bc7289272653fec11245 - Another Theft?
  • 0x5271b379f3e1954e20791142d734596a3de28efd - Aug 6 2021 Theft
  • 0x996f5ccbf2856137744603b382de559b78a096fc - Laundry
  • 0x190b71ecffeb8bcde68be86bc959e06baddaea6a