DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Steadefi

Date (as written)
2023-08
Year
2023
Country
Virgin Islands, British
Actors (as written)
Lazarus
Actor pages
Lazarus
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$1.14 million; $1,140,000; 1.2m

Source entries (4)

lazarus.day

Steadefi · 2023-08
Steadefi lost about $1.14 million after its deployer address was compromised, allowing the attacker to take ownership of vault contracts on Arbitrum and Avalanche, abuse owner-only functions, drain available lending-vault funds, pause farm contracts and bridge swapped proceeds to Ethereum. Although one incident write-up did not tie the compromise to a specific actor, ZachXBT's later laundering analysis included Steadefi among 25 cryptocurrency hacks traced to Lazarus Group, with the broader stolen-funds set routed through mixers, bridges and OTC conversion paths.
https://lazarus.day/incidents/steadefi/

tayvano/lazarus-bluenoroff-research

Steadefi · 2023-08-07
Amt Stolen: $1,140,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/steadefi.md

UN Panel of Experts S/2024/215

Steadefi · 7 August 2023
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2023: Victim: Steadefi; Date: 7 August; Amount (USD equivalent): 1.2m; Location: British Virgin Islands
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Steadefi · 2023-08
Reported: 2023-08; Victims: Steadefi; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Virgin Islands, British
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Suggest a correction on GitHub