$21M Stolen from SBI Crypto via Tornado Cash, North Korean Group Suspected
ByAinvest
Thursday, Oct 2, 2025 12:07 am ET1min read
TORN--
The attack highlights the vulnerabilities in crypto exchange operations and underscores the need for enhanced security measures. The incident also raises concerns about the threat posed by state-sponsored hacking groups and the use of mixing services like Tornado Cash in laundering operations.
The Lazarus Group, which has been previously linked to high-profile cyberattacks, exploited a vulnerability in SBI Crypto's security protocols to gain unauthorized access to the platform. The stolen funds were quickly transferred to Ethereum and then funneled through Tornado Cash, making it difficult to trace the transactions.
This incident is not an isolated case. In recent months, several high-profile projects have been targeted by hackers, including Hypervault, which vanished after a suspected rug pull involving $3.6 million. The use of Tornado Cash in these cases suggests a growing trend of leveraging privacy services to launder stolen funds and evade detection [1].
The SBI Crypto hack underscores the importance of robust security protocols and continuous monitoring in the crypto space. As the industry continues to grow, so do the risks and the need for proactive measures to protect investors and users. Enhanced security measures, including multi-factor authentication, regular security audits, and real-time monitoring, can help mitigate the risks associated with cyberattacks.
In the wake of this incident, SBI Group has issued a statement acknowledging the hack and promising to work with law enforcement and cybersecurity experts to investigate the breach and recover the stolen funds. The group has also committed to implementing additional security measures to prevent future attacks.
The SBI Crypto hack serves as a stark reminder of the ongoing challenges in the crypto space. While the technology offers immense potential, it also presents significant risks that must be addressed through robust security measures and vigilant oversight.
ETH--
SBI Crypto, a subsidiary of Japan's SBI Group, has been hacked, with $21 million stolen and laundered through Tornado Cash. The theft is linked to the Lazarus Group, a North Korean state-sponsored hacking collective. The incident highlights vulnerabilities in crypto exchange operations and the need for enhanced security measures. It also underscores the threat posed by state-sponsored hacking groups and the use of mixing services like Tornado Cash in laundering operations.
SBI Crypto, a subsidiary of Japan's SBI Group, has been the target of a significant cyberattack, resulting in the theft of $21 million in cryptocurrency. The hack is linked to the Lazarus Group, a North Korean state-sponsored hacking collective. The funds were subsequently laundered through Tornado Cash, a privacy-focused mixing service known for obscuring transactions [1].The attack highlights the vulnerabilities in crypto exchange operations and underscores the need for enhanced security measures. The incident also raises concerns about the threat posed by state-sponsored hacking groups and the use of mixing services like Tornado Cash in laundering operations.
The Lazarus Group, which has been previously linked to high-profile cyberattacks, exploited a vulnerability in SBI Crypto's security protocols to gain unauthorized access to the platform. The stolen funds were quickly transferred to Ethereum and then funneled through Tornado Cash, making it difficult to trace the transactions.
This incident is not an isolated case. In recent months, several high-profile projects have been targeted by hackers, including Hypervault, which vanished after a suspected rug pull involving $3.6 million. The use of Tornado Cash in these cases suggests a growing trend of leveraging privacy services to launder stolen funds and evade detection [1].
The SBI Crypto hack underscores the importance of robust security protocols and continuous monitoring in the crypto space. As the industry continues to grow, so do the risks and the need for proactive measures to protect investors and users. Enhanced security measures, including multi-factor authentication, regular security audits, and real-time monitoring, can help mitigate the risks associated with cyberattacks.
In the wake of this incident, SBI Group has issued a statement acknowledging the hack and promising to work with law enforcement and cybersecurity experts to investigate the breach and recover the stolen funds. The group has also committed to implementing additional security measures to prevent future attacks.
The SBI Crypto hack serves as a stark reminder of the ongoing challenges in the crypto space. While the technology offers immense potential, it also presents significant risks that must be addressed through robust security measures and vigilant oversight.

Stay ahead of the market.
Get curated U.S. market news, insights and key dates delivered to your inbox.
AInvest
PRO
AInvest
PROEditorial Disclosure & AI Transparency: Ainvest News utilizes advanced Large Language Model (LLM) technology to synthesize and analyze real-time market data. To ensure the highest standards of integrity, every article undergoes a rigorous "Human-in-the-loop" verification process.
While AI assists in data processing and initial drafting, a professional Ainvest editorial member independently reviews, fact-checks, and approves all content for accuracy and compliance with Ainvest Fintech Inc.’s editorial standards. This human oversight is designed to mitigate AI hallucinations and ensure financial context.
Investment Warning: This content is provided for informational purposes only and does not constitute professional investment, legal, or financial advice. Markets involve inherent risks. Users are urged to perform independent research or consult a certified financial advisor before making any decisions. Ainvest Fintech Inc. disclaims all liability for actions taken based on this information. Found an error?Report an Issue



Comments
No comments yet