DMM Bitcoin (2024) — Crypto Hack
LaunderedJapanese crypto exchange DMM Bitcoin lost 4,502.9 BTC worth $305M in the largest Japanese exchange hack since Coincheck 2018.
Summary
Japanese crypto exchange DMM Bitcoin lost 4,502.9 BTC worth $305M in the largest Japanese exchange hack since Coincheck 2018.
How It Was Compromised — CEX via Private Key Compromise
DMM Bitcoin's Bitcoin hot wallet was compromised, resulting in the unauthorized transfer of 4,502.9 BTC. The exchange halted all spot buy orders and restricted withdrawals. The FBI and Japanese police later attributed the theft to the North Korean Lazarus Group's TraderTraitor subunit, which used social engineering to compromise a Ginco employee who had access to DMM Bitcoin's transfer system.
Fund Flow & Laundering Analysis
Stolen BTC moved through multiple intermediary addresses before being processed by Huione Guarantee, a Cambodian money laundering platform previously sanctioned by the US Treasury. The FBI issued a joint advisory with Japanese agencies attributing the hack to Lazarus Group's TraderTraitor. DMM Bitcoin subsequently shut down and transferred customer accounts to SBI VC Trade.