Axie Infinity is a blockchain-based game where players help each other in order to generate profits rather than just having fun. Based on Ethereum, the game uses a derivative blockchain called Ronin to avoid Ethereum transaction fees.
A digital bridge makes it possible to link the two blockchains in order to take advantage of the advantages of the two cryptocurrencies. It is a flaw in this bridge that was targeted last month by a group of hackers to steal 173,600 ETH and 25.5 million USDC (USDC is a stable virtual currency linked to the dollar, 1 USDC = 1 dollar).
A well-known Korean group.
The hacker group behind this attack has been identified by the US Treasury Department. This is Lazarus, a group of hackers known to be sponsored by North Korea. This group is said to have already managed to steal at least $400 million worth of digital assets last year.
With more than 600 million stolen this year in one go, cybercriminals (partnered with APT38 on this one) are starting 2022 with a bang. The United States immediately added the identified group to the international sanctions list.
A source of income for North Korea
According to experts from the company Elliptic, Korea has already succeeded in laundering 18% of the assets obtained by Lazarus. The resources recovered by digital piracy and theft of all kinds are most likely used for the country’s armament program.
An FBI representative said in an interview (on condition of anonymity) that the US agency, the Treasury and other government partners will continue to track cybercriminal groups that help the North Korean regime generate revenue.
For its part, the developers of the game Axie Infinity, Sky Mavis, said that additional protective measures have been added to the digital bridge, hoping that it will be sufficient this time.