tayvano/lazarus-bluenoroff-research
Fantom Reuse Address · 2025-02-28
Amt Stolen: $3,200,000
Fantom Reuse Address
- Date (as written)
- 2025-02-28
- Year
- 2025
- Actor pages
- SquidSquad - UNC1069Sapphire Sleet
- Dollar figures (as written)
- $3,200,000; 3.2 ($ Million); ~$3.1M; $3.1M
Source entries (3)
Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
Private victim · 2025-02-28
Table 3: DPRK Cryptocurrency Thefts, January - September, 2025. Date: 2025-02-28; Victim: Private victim; DPRK APT: CryptoCore; Amount ($ Million): 3.2. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."
ZachXBT Telegram channel t.me/investigations (public web view)
Suspected Lazarus Group hack of an unknown victim on Tron, February 28, 2025; reused Fantom exec hack theft address (Oct 2023) cited in March 2024 UN report · 2025-03-01 (post date)
An unknown victim is suspected of being hacked by Lazarus Group on Tron for ~$3.1M on Feb 28, 2025.
Values found later for empty fields
actors: SquidSquad - UNC1069 / Sapphire Sleet
## 🔑 SquidSquad - UNC1069 / Sapphire Sleet ... | 🔑 | 2025-02-28 | [Fantom Reuse Address](./hacks-and-thefts/fantom_reuse_address.md) | $3,200,000 |