Cross-Chain Bridge Orbit Chain Hacker Successfully Transfers $48M to Tornado Cash: Arkham Data
Orbit Chain, a platform facilitating transactions across different blockchains, fell victim to hackers who exploited its cross-chain bridge in the final hours of 2023, resulting in an $82 million loss. Recent reports indicate that the hackers have now moved $48 million of the stolen funds to the Tornado Cash mixer.
According to blockchain analytics firm Arkham Intelligence, the perpetrators behind the Orbit Chain breach have resurfaced after months of inactivity. The group, known as the Orbit Chain Exploiter, recently transferred 8671 ETH (equivalent to $32 million) to a new address and is currently in the process of depositing it to Tornado Cash.
Arkham estimates that the hackers made off with over $100 million in ETH and DAI from Orbit Chain five months ago, and still retain over $66 million in ETH, as well as more than $20 million in DAI and USDT.
The exploiter has moved a total of 12,932 ETH valued at $48 million over the span of two days, conducting 7 transactions in the process. Etherscan data also reveals that the ETH was sent in batches of 100 ETH per transaction through Tornado Cash.
The Orbit Chain breach, which took place on the final day of 2023, saw cybercriminals siphoning off millions in various assets, possibly due to compromised private keys. While the exact method of the attack remains unclear, some speculate it could be a validator code exploit. Despite Orbit Chain’s use of multisig wallets to safeguard its assets, attackers managed to execute transactions in ETH, USDT, DAI, USDC, and WBTC.
Following the hack, suspicions arose that it may have been orchestrated by the notorious Lazarus Group from North Korea. Blockchain analysts from Match Systems noted similarities between the Orbit Chain incident and previous high-profile attacks attributed to the Lazarus Group. Metamask developer Taylor Monahan also drew parallels between the Orbit attack and previous Lazarus Group hacks, suggesting that 2024 could be another profitable year for the DPRK-linked cybercriminals.
Stay updated with the latest news by following us on Google News.
Subscribe to Updates
Get the latest creative news from FooBar about art, design and business.