DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

KuCoin

Date (as written)
2020-09
Year
2020
Country
Singapore
Actors (as written)
Lazarus
Actor pages
Lazarus
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$150 million; $275; $280 million; $275,000,000; approximately $281 million; $281 million; 275m; roughly $275 million; Lazarus total more than $1.75 billion; 2019 UpBit hack more than $49 million; $275 million

Source entries (7)

lazarus.day

KuCoin · 2020-09
KuCoin suffered a September 2020 exchange breach in which attackers gained access to hot-wallet private keys and stole cryptocurrency, with reported losses ranging from at least $150 million to roughly $275-$280 million. Chainalysis attributed the hack to Lazarus Group based partly on laundering patterns, including movement through structured mixer payments, OTC brokers, exchange deposit addresses, and DeFi services such as Uniswap to swap stolen tokens without a custodial intermediary.
https://lazarus.day/incidents/kucoin/

tayvano/lazarus-bluenoroff-research

Kucoin · 2020-09-26
Amt Stolen: $275,000,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/kucoin.md

UN Panel of Experts S/2021/211

Cryptocurrency exchange hack (September 2020) · September 2020
Para. 159: "The Panel is investigating a hack against a cryptocurrency exchange that occurred in September 2020. The hack resulted in approximately $281 million worth of cryptocurrencies stolen from the exchange. Preliminary analysis, based on the attack vectors and subsequent efforts to launder the illicit proceeds, strongly suggests links to the Democratic People's Republic of Korea."
https://undocs.org/S/2021/211

UN Panel of Experts S/2024/215

KuCoin · 26 September 2020
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2020: Victim: KuCoin; Date: 26 September; Amount (USD equivalent): 275m; Location: Seychelles
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

KuCoin · 2020-09
Reported: 2020-09; Victims: KuCoin; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Singapore
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Elliptic blog: Elliptic 10 year anniversary: the biggest crypto hacks of the last decade

Kucoin hack, September 2020 · May 9, 2023 (as shown on page)
The North Korean Lazarus Group was subsequently accused of conducting the attack.
https://www.elliptic.co/insights/elliptic-10-year-anniversary-the-biggest-crypto-hacks-of-the-last-decade/

Chainalysis blog: Lazarus Group Pulled Off 2020's Biggest Exchange Hack

KuCoin exchange hack · published 2021-02-09 (2020 hack)
Lazarus Group managed to pull off the biggest cryptocurrency theft of the year, and third-largest of all time, stealing roughly $275 million worth of cryptocurrency from the exchange KuCoin.
https://www.chainalysis.com/blog/lazarus-group-kucoin-exchange-hack/

Suggest a correction on GitHub