The Taiwanese Cryptocurrency Exchange Bitopro claims that the North Korean Hacking Group Lazarus is behind a cyber attack, causing $ 11,000,000 cryptocurrency stolen on May 8, 2025.
The company blamed Lazarus on the basis of evidence recovered from its internal investigation. It notes that the pattern and functioning of the attack meet with the people used in the previous cyber attack.
“Attacking functioning is similar to patterns seen in many previous international events, including illegal transfer from global bank Swift system and asset theft from major international cryptocurrency exchanges,” Reads the announcement,
“These attacks are attributed to the North Korean hacking organization Lazarus Group.”
Bitopro is a cryptocurrency exchange that mainly completes Taiwanese users, supports fiat deposits and withdrawal in TWD and selects crypto assets.
It has more than 800,000 registered users and a daily trading volume of about 30 million dollars.
On May 8, 2025, during a hot wallet system update, hackers demonstrated unauthorized withdrawal from an old hot wallet in several blockchain including Etheram, Tron, Solan and Polygon.
After the theft, stolen funds were looted through dex and mixer such as Tornado Cash, Thorchain and Wasabi Wallet.
Bitopro was slow in accepting the event, only Publicly confirmed it on 2 JuneGiven that all the operations were unaffected and the affected hot purse was re -filled by available reserves.
Hack investigations now confirmed that there was no internal participation, even though the attackers started a social engineering attack and implanted the malware on the device of the employee managing the cloud operations.
Through this infection, the attackers kidnapped the AWS session tokens to bypass the multi-factor certification (MFA) and gained control over the cloud infrastructure of Bitpro.
Subsequently, the command-end-control (C2) server gave command to the implant, which injected scripts in the hot wallet host as an attack.
When the wallet was upgraded and the property was transferred, the attackers stole the crypto, while imitating the general operational behavior to immediately detect.
Once Bitopro detected the agreement, they shut down the hot wallet system and rotated the cryptographic keys. However, about 11 million dollars of cryptocurrency was already stolen.
The company informed the implemented officials and attached to an external cyber security expert to investigate the incident, a process was completed on 11 June.
The North Korean Lazarus Group is notorious for targeting cryptocurrency and decentralized finance institutions. The hacking group is believed to have been responsible for the record-breaking digital asset history, most recently, theft of $ 1.5 billion from Bybit.
Patching meant complex scripts, long and endless fire drills. No more.
In this new guide, the tines break down how it is leveling with modern organ automation. Patch fast, reduce overhead, and focus on strategic tasks – no complex script is required.
