DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

EasyFi

Date (as written)
2021-04
Year
2021
Country
India
Actors (as written)
Bluenoroff
Actor pages
Bluenoroff
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$6 million; $53 million; $81,000,000; 81m

Source entries (5)

lazarus.day

EasyFi · 2021-04
EasyFi lost about $6 million in stablecoins and roughly $53 million in EASY tokens after mnemonic keys tied to administrative transfer capability were compromised, with evidence pointing to a compromised machine and weak operational controls rather than a smart contract exploit. ZachXBT later included EasyFi in a set of cryptocurrency thefts traced to Lazarus Group, also described as Bluenoroff or APT38, involving hot-wallet breaches, private-key compromise, malicious transaction approvals, and modified MetaMask activity.
https://lazarus.day/incidents/easyfi/

tayvano/lazarus-bluenoroff-research

EasyFi Founder · 2021-04-19
Amt Stolen: $81,000,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/easyfi.md

UN Panel of Experts S/2024/215

EasyFi · 19 April 2021
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2021: Victim: EasyFi; Date: 19 April; Amount (USD equivalent): 81m; Location: India
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

EasyFi · 2021-04
Reported: 2021-04; Victims: EasyFi; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: India
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

EasyFi hack · 2021
(MSMT/2025/2, report p. 45) “Another Wang wallet address, TFzxRARRELBXvLtpKFayrzLPZmifhXNNLw, is linked to the AlexLabs (2024), Maverick (2023), and EasyFi (2021) hacks conducted by the DPRK.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub