On September 19, 2024, BingX detected abnormal network access after attackers drained about $44.7 million from hot wallets across Ethereum, BNB Chain, Polygon, and other networks. The exchange suspended withdrawals and moved remaining assets while investigators tracked rapid cross-chain fund movement; linked reporting says Lazarus-style behavior was noted but attribution remained speculative.
Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-09-20; Victim: BingX; DPRK APT: TraderTraitor; Amount ($ Million): 52. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."
Many of these incidents were potentially attributed to the Lazarus Group, the North Korean APT that specializes in social engineering attacks
The following is a chronological list of significant incidents attributed to DPRK-affiliated groups, with data from SlowMist Hacked: ... Sep-19, 2024 BingX $45,000,000
On September 20, 2024, Singapore-based cryptocurrency exchange BingX detected unauthorized access to a hot wallet, resulting in losses of $45 million. Analysis by MistTrack suggested links between this incident and the Indodax hack, both involving laundering through addresses associated with Lazarus Group, a North Korean hacking organization.