In a troubling new trend, hackers are adopting the guise of inexperienced traders to launder cryptocurrency. This method, which involves creating swaps vulnerable to arbitrage bots, has been linked to notorious groups like the Lazarus Group. Experts warn that this tactic poses significant risks to the integrity of cryptocurrency markets.
Key Takeaways
-
Hackers are using the facade of novice traders to launder funds.
-
They create swaps that are susceptible to attacks from arbitrage bots they control.
-
The laundering process often involves popular mixers like FixedFloat and ChangeNow.
-
Stablecoins such as USDC and USDT are commonly used in these schemes.
-
Organized activities have been identified, with multiple transactions occurring in quick succession.
The New Laundering Method
Hackers are increasingly sophisticated in their approach to laundering cryptocurrency. By masquerading as inexperienced traders, they exploit the market's vulnerabilities. This method involves:
-
Creating Vulnerable Swaps: Hackers set up swaps that can be easily manipulated by their own arbitrage bots.
-
Using Popular Mixers: Transactions are funneled through well-known mixers like FixedFloat and ChangeNow, which are often used by money launderers.
-
Employing Stablecoins: The laundering process typically involves stablecoins such as USDC and USDT, which are pegged to the dollar and trade at relatively stable prices.
Transaction Process
The laundering process follows a multi-step approach:
-
Initial Deposits: Multiple wallets deposit and withdraw funds through platforms like Aave.
-
Trading on Uniswap: After withdrawing assets, launderers add stablecoins to a trading pool on the decentralized exchange Uniswap.
-
Manipulating Prices: Launderers adjust the trading pools to allow their bots to intervene in transactions, leading to significant losses for the wallets involved.
For instance, in one case, hackers exchanged $90,000 in USDC for only $2,300 in USDT, incurring a loss of $87,700. However, this loss is offset by the profits gained from the arbitrage activities controlled by their software.
Evidence of Organized Activity
Security researcher Yegor Ruditsa has identified several transactions that raise serious suspicions. He noted that six transactions were executed through the same trading pool within just five minutes, indicating a coordinated effort by the hackers.
Additional Tactics Employed
Hackers are not limited to this method alone. They also employ various other tactics, including:
-
Sandwich Attacks: Bots purchase tokens before large trades and sell them at a markup.
-
Low Liquidity Assets: In some instances, hackers have used low liquidity assets to obscure their activities. For example, a wallet linked to the Lazarus Group utilized WAFF and USDT, prompting Tether to block the associated Uniswap pool.
Recent Incidents
On March 13, hackers from the Lazarus Group transferred 400 ETH (approximately $752,000) to the mixer Tornado Cash. The initial address received these funds through the THORChain protocol, which the group has actively exploited in laundering stolen assets from exchanges like Bybit.
As the cryptocurrency landscape continues to evolve, the emergence of such laundering techniques highlights the need for enhanced security measures and vigilance within the industry. Stakeholders must remain aware of these tactics to protect their assets and maintain the integrity of the market.
Sources
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.