Bitget exploit funds laundered by Chinese actors via Discord and Telegram
by@zachxbt
Summary
Illicit actors in China are actively soliciting support for laundering funds related to the recent $387 million Bitget exploit, reportedly orchestrated by alleged DPRK attackers, through public Discord servers and Telegram channels. This behavior aligns with previous patterns observed in other exploits, such as the $292 million Kelp DAO incident earlier this year, indicating a systematic approach to laundering that has been consistently tracked across different cases attributed to TraderTraitor. Currently, these actors are using methods like chain-hopping and depositing into mixing services such as Wasabi to obscure the origin of the funds.
Tokens
$BITGET$KELP
Analysis
Cc: Cc is an alias of a suspected money launderer operating via public Discord servers and linked to specific on-chain transactions. This actor is connected to the movement of funds from the Bitget exploit. jack: jack is an alias of a suspected money launderer active in Discord communities. The individual is associated with transactions involving the Bitget exploit proceeds. lolo: lolo, also referred to as Marin, is an alias of a suspected money launderer active on both Telegram and Discord. This actor has been linked to laundering from the Bitget exploit as well as the earlier Kelp DAO incident. Melon: Melon is an alias of a suspected money launderer using Discord handles. This actor has conducted transactions tied to the Bitget exploit funds. Bitget: Bitget is a cryptocurrency exchange that was the target of a major exploit resulting in substantial fund losses. The news details ongoing laundering efforts tied directly to the proceeds of this incident by suspected DPRK-linked actors. Wasabi: Wasabi is a cryptocurrency mixing service employed to obscure transaction trails. Illicit actors involved in the Bitget exploit are depositing chain-hopped funds into the service as part of their laundering process. HELP ME: HELP ME is an alias of a suspected money launderer operating in public Discord servers. The handle is connected to on-chain activity involving the Bitget exploit funds. Kelp DAO: Kelp DAO is a decentralized finance protocol that suffered an exploit earlier in the year. One of the aliases active in the current laundering operation was previously involved in handling funds from this prior incident. Historical Patterns: The same laundering approach has been observed following multiple TraderTraitor attributed exploits, with consistent tracking of involved groups. Laundering Channels: Suspected actors are openly seeking support for orders in public Discord servers and Telegram channels associated with the services they use.
Categories
cryptoai_agentson_chain_whale