Stake.com

Date (as written): 2023-09
Year: 2023
Country: Australia
Actors (as written): Lazarus
Actor pages: Lazarus
Tags (as written): FinancialGain Entertainment
Dollar figures (as written): $41 million; $41 Million; $41,000,000; 41.3m; approximately $41 million; $ 41,000,000; $41M; approximately $7.8 million (Polygon); approximately $17.8 million (BSC); approximately $15.7 million (Ethereum); $7.8 million; more than $200 million so far in 2023; approximately $60 million Alphapo and CoinsPaid on or about July 22, 2023; approximately $100 million Atomic Wallet on or about June 2, 2023; at least $291.3 million across five distinct incidents in 2023 (combined); $40 million

Source entries (16)

lazarus.day

Stake.com · 2023-09

Stake.com was robbed on or about September 4, 2023 after funds were taken from Stake-controlled Ethereum, Binance Smart Chain and Polygon addresses, with FBI attribution assigning the theft to DPRK Lazarus Group actors also known as APT38. TRM described subsequent laundering through swaps, Squid Router, Avalanche, wrapped BTC, Bitcoin bridging and mixer-oriented routes, aligning the incident with other Lazarus-linked 2023 cryptocurrency thefts from Alphapo, CoinsPaid and Atomic Wallet.

https://lazarus.day/incidents/stake/

EuRepoC

North Korean state-sponsored hacking group APT38 stole $41 million worth of cryptocurrencies from online casino and betting platform Stake.com on or about 4 September 2023 · 04.09.2023

The North Korean state-sponsored hacking group APT38 stole $41 million worth of cryptocurrencies from online casino and betting platform Stake.com on or about 4 September 2023, the FBI disclosed on 6 September 2023.

Sources cited by EuRepoC (11)

https://thehackernews.com/2023/09/north-korean-hackers-exploit-zero-day.html

https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

https://twitter.com/zachxbt/status/1698698642951971056

https://twitter.com/Stake/status/1698746766076588057

Show 6 more

https://research.checkpoint.com/2023/11th-september-threat-intelligence-report/

https://securityaffairs.com/150957/apt/lazarus-stole-240m-crypto-assets.html

https://securityaffairs.com/151433/hacking/mixin-network-200m-cyber-heist.html

https://securityaffairs.com/152106/apt/north-korea-laundered-900-million.html

https://therecord.media/north-korea-cryptocurrency-hacks-un-experts

https://thehackernews.com/2024/04/microsoft-warns-north-korean-hackers.html

ThaiCERT Threat Group Cards

FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com · 2023-09

FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

tayvano/lazarus-bluenoroff-research

Stake · 2023-09-04

Amt Stolen: $41,000,000

https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/stake.md

CFR Cyber Operations Tracker

Targeting of Stake virtual currency service · Sep 2023

Lazarus Group stole $41 million in cryptocurrency from the online gambling platform Stake.com.

https://www.cfr.org/cyber-operations/targeting-of-stake-virtual-currency-service

https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

https://www.bleepingcomputer.com/news/security/crypto-casino-stakecom-loses-41-million-to-hot-wallet-hackers/

UN Panel of Experts S/2024/215

Stake.com · 4 September 2023

Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2023: Victim: Stake.com; Date: 4 September; Amount (USD equivalent): 41.3m; Location: Australia

https://undocs.org/S/2024/215

FBI press release 2023-09-06

Stake.com · on or about September 4, 2023

The FBI is issuing this release to warn the public regarding the theft of approximately $41 million in virtual currency from Stake.com, an online casino and betting platform. The FBI has confirmed that this theft took place on or about September 4, 2023, and attributes it to the Lazarus Group (also known as APT38) which is comprised of DPRK cyber actors.

https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

SlowMist Hacked (hacked.slowmist.io)

Stake.com · 2023-09-04

Description of the event: The encrypted gambling platform Stake.com has been attacked, including the ETH/Polygon/BSC chain, and the loss has reached 41 million US dollars. On September 5, Stake co-founder Edward Craven confirmed the hack but said the platform’s private keys had not been compromised. Craven said the attack was a "sophisticated breach" that targeted the company's services used to authorize transactions on the Ethereum, Polygon and BNB Chain blockchains. On September 6, the US Federal Bureau of Investigation (FBI) stated that the North Korean hacker group Lazarus Group was responsible for the Stake.com attack. | Amount of loss: $ 41,000,000 | Reference: https://twitter.com/Stake/status/1698746766076588057

https://hacked.slowmist.io/

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Stake.com · 2023-09

Reported: 2023-09; Victims: Stake.com; Motivations: FinancialGain; Sectors: Entertainment; Countries: Australia

https://data.mendeley.com/datasets/wwb2rzgfn7/2

Check Point Research

11th September – Threat Intelligence Report · 2023-09-11

$41M in cryptocurrency have been hijacked from the Curaçao based online casino Stake.com. According to the company, only its own funds were impacted, while customers’ accounts were not compromised. The FBI has attributed the attack to the North Korean Lazarus APT group, which is notorious for having stolen large amounts of cryptocurrency in recent years.

https://research.checkpoint.com/2023/11th-september-threat-intelligence-report/

US court filing via CourtListener RECAP: United States v. BITCOIN AND BTC.B SEIZED FROM EIGHT TRANSACTION HASHES AT CRYPTOCURRENCY BRIDGE-1

Hack and theft from COMPANY-4 (laundered via bridges and mixers to BTC; defendant funds frozen at Cryptocurrency Bridge-1) · on or about September 4, 2023

Finally, on or about September 4, 2023, North Korean cyber actors hacked and stole approximately $41 million worth of virtual currency from COMPANY-4. ... North Korean hackers stole some of COMPANY-4's virtual currency from the Polygon Network. At the time of the hack, those the stolen funds were valued at approximately $7.8 million. [Case No. 1:24-cv-02826, U.S. District Court for the District of Columbia; filing: COMPLAINT against BITCOIN AND BTC.B SEIZED FROM EIGHT TRANSACTION HASHES AT CRYPTOCURRENCY BRIDGE-1]

https://storage.courtlistener.com/recap/gov.uscourts.dcd.273464/gov.uscourts.dcd.273464.1.0_1.pdf

Elliptic blog: How the Lazarus Group is stepping up crypto hacks and changing its tactics

Stake.com theft (September 4th 2023) · Sep 15, 2023

On September 4th 2023, online crypto casino Stake.com suffered an attack in which approximately $41 million in virtual currency was stolen ... The FBI issued a press release on September 6th confirming that the Lazarus Group was behind this attack.

https://www.elliptic.co/insights/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics/

TRM Labs blog: FBI Confirms that North Korea was Behind $41 Million Stake.com Exploit

Stake.com exploit (Ethereum, BSC, Polygon) · published 2023-09-08

the theft of approximately $41 million in crypto assets from Stake.com, an online casino and betting platform, was the work of North Korea's Lazarus Group.

https://www.trmlabs.com/resources/blog/fbi-confirms-that-north-korea-was-behind-41-million-stake-com-exploit

CertiK blog: Lazarus Group's Web3 Rampage

Stake.com breach · published 2023-09-13

CertiK has identified transactions connecting the Atomic Wallet, Alphapo, CoinsPaid, Stake.com, and CoinEx breaches, serving as on-chain evidence of Lazarus Group's involvement.

https://www.certik.com/resources/blog/216tegKHtRmx5pOI3UgYCX-lazarus-groups-web3-rampage

FBI press release "FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com" (2023-09-06; via Wayback)

Stake.com theft (approximately $41 million) · on or about September 4, 2023

The FBI has confirmed that this theft took place on or about September 4, 2023, and attributes it to the Lazarus Group (also known as APT38) which is comprised of DPRK cyber actors.

https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom

Hackmageddon cyber attacks timelines (Paolo Passeri)

Stake.com · 04/09/2023

Online cryptocurrency casino Stake.com announces that its ETH/BSC hot wallets had been compromised to perform unauthorized transactions, with over $40 million in crypto reportedly stolen. [Date Occurred: 04/09/2023; Date Discovered: 04/09/2023]

https://www.hackmageddon.com/2023/11/02/1-15-september-2023-cyber-attacks-timeline/

https://www.bleepingcomputer.com/news/security/crypto-casino-stakecom-loses-41-million-to-hot-wallet-hackers/

Suggest a correction on GitHub