DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

SBICrypto

Date (as written)
2025-09
Year
2025
Country
Japan
Actors (as written)
Lazarus
Actor pages
Lazarus
Tags (as written)
Cryptocurrency FinancialGain
Dollar figures (as written)
$21 million; $24 million; $20,283,197; 24000000 (leaderboard data field "amount"); $308 million; ~$21M; $21M

Source entries (4)

lazarus.day

SBICrypto · 2025-09
On September 24, 2025, SBI Crypto, a mining-pool subsidiary of Japan’s SBI Group, suffered suspicious unauthorized outflows totaling roughly $21 million to $24 million across Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash wallets. Funds were routed through instant exchanges, Tornado Cash, FixedFloat-linked flows, DEX or aggregator activity, and repeated cross-chain splitting, with several indicators resembling known DPRK attack patterns.
https://lazarus.day/incidents/sbicrypto/

tayvano/lazarus-bluenoroff-research

SBI Crypto Mining · 2025-09-24
Amt Stolen: $20,283,197
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/sbi-crypto.md

Rekt News leaderboard (rekt.news/leaderboard)

SBI Crypto - Rekt · 9/24/2025
Excerpt: Japan's SBI Crypto was drained for $24 million by suspected North Korean hackers - six months after absorbing DMM Bitcoin's $308 million hack victims. Five chains hit, one week of silence until ZachXBT flagged it, only vague corporate fog since. | Article date: 10/3/2025
https://rekt.news/sbi-crypto-rekt

ZachXBT Telegram channel t.me/investigations (public web view)

SBI Crypto suspicious outflows September 24, 2025 · 2025-10-01 (post date)
On September 24, 2025 addresses linked to SBI Crypto saw ~$21M in suspicious outflows on Bitcoin, Ethereum, Litecoin, Doge, & Bitcoin Cash.
https://t.me/investigations/278

Suggest a correction on GitHub