FTX thief launders $20M daily

Share post:

A thief who stole over $470 million in cryptocurrency from FTX during its collapse is laundering $20 million of the stolen funds into traditional money every day, according to a new analysis by cryptocurrency investigation firm Elliptic.

The thief began moving the stolen funds on September 30, just days before FTX founder Sam Bankman-Fried’s trial began. The thief has been sending chunks of the stolen Bitcoin to a mixer service called Sinbad, where it is laundered and presumably cashed out.

Elliptic has been able to trace $54 million of the stolen Bitcoin to Sinbad, but the trail has gone cold for now. Experts say the thief’s activity is strange and goes against the norm for cryptocurrency hackers and thieves.

“Crypto launderers have been known to wait for years to move and cash out assets once public attention has dissipated, but in this case they have begun to move just as the world’s attention is once again directed towards FTX and the events of November 2022,” said Tom Robinson, Elliptic’s co-founder.

Elliptic also found a potential link between the FTX thief and Russian cyber-crime. Some of the stolen Bitcoin successfully laundered last year has been traced to a wallet known to be used by Russian-linked criminal groups. Elliptic says this could point to the involvement of a broker or other intermediary with a link to Russia.

It is unclear how the thief was able to get digital keys to FTX’s crypto wallets, but it is thought it was either an insider or a hacker who was able to steal the information.

The sources for this piece include an article in BBC.

SUBSCRIBE NOW

Related articles

CrowdStrike faces backlash over $10 “apology” voucher

CrowdStrike is facing criticism after offering a $10 UberEats voucher to apologize for a global IT outage that...

North Korean hacker infiltrates US security vendor, loads malware

KnowBe4, a US-based security vendor, unknowingly hired a North Korean hacker who attempted to introduce malware into the...

Security company accidentally hires a North Korean state hacker: Cybersecurity Today for Friday, July 26, 2024

A security company accidentally hires a North Korean state actor posing as a software engineer. CrowdStrike issues its...

Security vendor CrowdStrike issues an update from their initial Post Incident Review

Security vendor CrowdStrike released an update from their initial Post Incident Review (PIR) today. The company's CEO has...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways