Japanese crypto exchange Liquid had hot wallets compromised across four blockchains, with Lazarus Group attribution.
Liquid Global's hot wallet infrastructure was breached across multiple blockchains simultaneously. The attackers moved swiftly across Ethereum, Bitcoin, XRP, and Tron holdings. Liquid suspended withdrawals and deposits. FTX provided $120M emergency loan post-hack. Blockchain analysis attributed the attack to North Korea's Lazarus Group.
ETH and ERC-20 tokens converted to ETH via Uniswap and deposited into Tornado Cash. Bitcoin routed through multiple mixing services. XRP portion tracked by Ripple and partially frozen on exchanges. North Korean Lazarus Group's characteristic rapid multi-chain drain-and-mix pattern confirmed by multiple analytics firms.
0xe0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f