US Treasury Sanctions More North Korea-Linked ETH Wallets Over $600M Ronin Hack

The three new wallets join an Ethereum address added to the sanctions list last week.

AccessTimeIconApr 22, 2022 at 6:04 p.m. UTC
Updated Apr 23, 2022 at 7:05 p.m. UTC

Danny is CoinDesk's deputy business editor. He owns BTC, ETH and SOL.

Nikhilesh De is CoinDesk's managing editor for global policy and regulation. He owns marginal amounts of bitcoin and ether.

U.S. government officials are throwing a wider sanctions dragnet over alleged North Korean crypto wallets.

On Friday, the Treasury Department's Office of Foreign Asset Control (OFAC) added three Ethereum addresses to its sanctions list, joining an address listed last week that the federal government tied to the theft of around $600 million in crypto from Axie Infinity's Ronin bridge. All three addresses had received sizable inbound transfers of stolen ether (ETH) from the originally sanctioned wallet over the past week.

The operators of the Ronin exploit wallet, said by the FBI and OFAC to be North Korea's Lazarus hacking group, have been laundering funds by moving them from a sanctioned address to an intermediary address before sending the funds to Tornado Cash, a mixer designed to obfuscate the source and destination of funds moved through the service.

This pattern repeated on Friday, when funds moved from one of the newly sanctioned addresses to another intermediary before once again landing at Tornado Cash.

None of the sanctioned addresses have directly interacted with Tornado Cash.

The nature of Tornado Cash makes it difficult for the operators of the service to blacklist addresses, as OFAC requires any entities touching the U.S. financial system to do. The mixer adopted a compliance tool offered by blockchain analytics firm Chainalysis that lets it blacklist certain addresses, but only on the user-facing decentralized app that Tornado Cash's operators can influence. Individuals can still use the protocol itself to bypass this compliance tool.

Also, at least as of last week, the Chainalysis tool only listed the originally sanctioned address.

A representative for Tornado Cash previously told CoinDesk that "OFAC is the judge of what addresses need to be banned."

"It’s a guessing game so far. I assume only 1 address has been identified by OFAC that should be sanctioned relating to that event. Which means Chainalysis update[s] whatever is in sanction’s list," the representative said.

Officials have accused the Hermit Kingdom of mounting an aggressive hacking spree against the crypto economy.

This is a developing story and will be updated.

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

CoinDesk - Unknown

Danny is CoinDesk's deputy business editor. He owns BTC, ETH and SOL.

CoinDesk - Unknown

Nikhilesh De is CoinDesk's managing editor for global policy and regulation. He owns marginal amounts of bitcoin and ether.

CoinDesk - Unknown

Danny is CoinDesk's deputy business editor. He owns BTC, ETH and SOL.

CoinDesk - Unknown

Nikhilesh De is CoinDesk's managing editor for global policy and regulation. He owns marginal amounts of bitcoin and ether.

Trending

1
CoinDesk - Unknown
Three Arrows Capital Liquidation Ordered in British Virgin Isles: Report

Partners from Teneo Restructuring have been called in to handle the insolvency, Sky New reported.

CoinDesk - Unknown
2
CoinDesk - Unknown
Bitcoin Dips Under $20K on Blunted Growth Sentiment as Spain Fuels Inflation Concerns

Traders assessed revived concerns of rampant inflation and growth for the coming months.

CoinDesk - Unknown
3
CoinDesk - Unknown
First Mover Asia: Remember ICOs? You Would Have Made a Fortune if You HODLed; Bitcoin Slogs Toward $20K

Investors who purchased a breadbasket of blue chip coin offerings about five years ago would have generated an 819% return, even with the current bear market; most cryptos fell in Tuesday trading.

CoinDesk - Unknown
4
CoinDesk - Unknown
Compass Mining Seen Losing Maine Facility After Failing to Pay Power Bill

The most valuable crypto stories for Tuesday, June 28, 2022.

CoinDesk - Unknown