KuCoin (2020) — Crypto Hack
Partially RecoveredKuCoin's hot wallets were compromised, with North Korean hackers suspected. Most funds recovered through project team interventions.
Summary
KuCoin's hot wallets were compromised, with North Korean hackers suspected. Most funds recovered through project team interventions.
How It Was Compromised — CEX via Private Key Compromise
Hackers gained access to KuCoin's hot wallet private keys and drained Bitcoin, Ethereum, and ERC-20 token hot wallets. KuCoin quickly identified the attacker's addresses and worked with blockchain projects to freeze stolen tokens. Multiple projects rolled back transactions or issued new contracts to negate the theft.
Fund Flow & Laundering Analysis
Stolen ERC-20 tokens rapidly routed through Uniswap and Kyber Network. ETH moved through Tornado Cash. Bitcoin sent through mixers. Approximately $204M recovered through cooperation with exchanges and blockchain projects who froze or replaced stolen tokens. Suspected North Korean Lazarus Group involvement.