UnoRe DAO

lazarus.day

On November 14, 2023 at approximately 15:49 UTC, Uno Re suffered a deployer private-key compromise that let an attacker transfer contract ownership, alter the claims assessor role, and drain SSIP, SSRP, and Rewarder contracts. Uno Re reported losses of 32.4 million UNO, 127.9 thousand USDC, 59.3 thousand USDT, and 18.4 ETH, with stolen UNO sold through Uniswap and PancakeSwap before proceeds moved through exchanges, mixers, swaps, and additional chains.

tayvano/lazarus-bluenoroff-research

Amt Stolen: $219,000

UN Panel of Experts S/2024/215

Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2023: Victim: Uno Re Dao (possibly DPRK IT workers); Date: 14 November; Amount (USD equivalent): 219,000; Location: Estonia

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2023-11; Victims: UnoRe DAO; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Estonia

Forensic work suggested the attack may be part of a broader operation targeting developer and deployer accounts, with DareNFT and LunaFi cited as related examples, but the report did not attribute the activity to a named threat actor.