Ронин хакери су преместили украдених 625 милиона долара на Битцоин мрежу: Извештај

Ronin hackers have transferred the stolen assets from Ethereum to the Bitcoin network, according to new findings by blockchain investigator and developer ₿liteZero.

Recall that after the Хак на Ронин мост in March, the attackers moved the $625 million worth of USDC and ETH to Ethereum-based crypto mixer Tornado Cash, making it difficult for authorities to trace the movement of the funds. But Tornado wasn’t the end as the hackers took further steps in obscuring the transactions.

Фоллов тхе монеи

₿liteZero said he has been tracking the stolen funds and noticed that the attackers had transferred all the assets to the Bitcoin protocol using a network bridge and several crypto exchanges.

Пратио сам украдена средства на Ронин мосту.
Приметио сам да су Ронин хакери пренели сва своја средства на битцоин мрежу. Већина средстава је депонована на миксере (ЦхипМикер, Блендер).

Ова тема? ће илустровати процедуре анализе праћења.?? пиц.твиттер.цом/иразцЈ22кФ

— ₿литеЗеро (@блитезеро) Август КСНУМКС, КСНУМКС

Using Centralized Exchanges

The blockchain investigator found that after the hackers withdrew the funds from Tornado Cash, they sent about 6,250 ETH ($20.7 million) to centralized exchanges (CEXs) such as Бинанце, Huobi, and FTX before sending the funds to North Korean crypto mixer Blender.

In May, the United States Treasury Department Санкционисано Blender addresses, noting that the crypto mixer assisted the Ronin hackers in processing over $20.5 million of the stolen funds.

Interestingly, ₿liteZero stated that most of the sanctioned Blender addresses were used by the Ronin hackers to receive funds after withdrawing from CEXs. Following the money, the investigator noted that the total funds withdrawn from the exchanges amounted to $20.72 million, consistent with the U.S. Treasury’s accusation.

Hackers Bridged Stolen Funds to Bitcoin Network

The hackers converted the rest of the assets to renBTC using 1inch or Uniswap. renBTC is wrapped bitcoin on the Ethereum network powered by Ren Protocol. Since Ren enables the movement of value between blockchains, the hackers were able to bridge the assets from Ethereum to the Bitcoin network.

Afterward, the hackers sent most of the funds to crypto mixers such as ChipMixer and Blender. They transferred the funds to ChipMixer before withdrawing some to Blender.

In concluding the Twitter thread, ₿liteZero said they are currently working on analyzing the hackers, although they believe that will be more complex.

I’m working on analyzing Ronin hackers, and the next work will be more complex.

‘Where’s the money?’
It is a mystery to be investigated, and I look forward to more progress being made.
Thanks for taking the time to read my thread, good luck!

— ₿литеЗеро (@блитезеро) Август КСНУМКС, КСНУМКС