North Korea’s Role in the Upbit Cryptocurrency Heist
In a significant revelation, South Korea has officially confirmed that North Korean hacker groups, known as Lazarus and Andariel, were behind the 2019 Upbit cryptocurrency exchange hack. Originally, the theft amounted to $50 million, but with the surge in cryptocurrency value, the stolen assets are now valued at over $1 billion.
The Upbit Hack: A Brief Overview
In late November 2019, Upbit, a major South Korean cryptocurrency exchange, reported an unauthorized transfer of 342,000 Ether (ETH) from its hot wallet. At the time, Ether was trading at approximately $147 per coin, leading to a total loss of $50 million. The recent investigations have shed light on the involvement of North Korean hackers in this breach.
Tracing the Hackers
South Korea’s National Office of Investigation confirmed North Korean involvement by tracking cryptocurrency flows and IP addresses. Additionally, they considered linguistic clues and collaborated with the United States Federal Bureau of Investigation. Despite confirming the perpetrators, specific hacking methods remain undisclosed to prevent similar future attacks.
Disposal of Stolen Cryptocurrency
Post-theft, the attackers allegedly sold around 57% of the stolen Ether through exchanges suspected to be operated by North Koreans. The rest of the funds were laundered across 51 international exchanges, complicating recovery efforts.
South Korea’s Regulatory Scrutiny on Upbit
The confirmation of North Korean involvement coincides with a regulatory probe into Upbit for potential Know Your Customer (KYC) violations. South Korea’s Financial Intelligence Unit identified up to 600,000 possible breaches during a review of Upbit’s business license renewal. These violations, including accepting blurred identification documents, could result in fines up to $71,500 per case and pose challenges to the exchange’s operational legitimacy.
Implications of the Upbit Hack
The Upbit hack underscores the vulnerability of cryptocurrency exchanges to sophisticated cyber-attacks. It also highlights the geopolitical dimension of cybercrime, with state-sponsored groups engaging in illicit activities to fund regime activities.
Conclusion
The confirmation of North Korea’s role in the Upbit hack marks a crucial development in the ongoing battle against cybercrime in the cryptocurrency sector. It serves as a reminder of the importance of stringent security measures and regulatory compliance to safeguard digital assets against future threats. As cryptocurrencies continue to rise in value, the stakes in securing these platforms grow ever higher, necessitating vigilance and innovation in defense strategies.
