Russian Networks Linked to Laundering of LastPass Breach's $35M in Stolen Crypto

Following the 2022 LastPass data breach, blockchain firm TRM Labs has tied over $35 million in stolen cryptocurrency to Russian cybercriminals, detailing sophisticated laundering via mixers and exchanges persisting into late 2025.

Blockchain intelligence firm TRM Labs has deepened its analysis of the 2022 LastPass breach—previously reported for enabling prolonged crypto thefts—revealing direct ties to Russian cybercriminal networks. The password manager hack exposed user vaults, allowing drainings that continued into late 2025.

Attackers obscured the trail using privacy tools: converting assets to Bitcoin via instant swaps, then mixing through Wasabi Wallet and CoinJoin. TRM Labs de-anonymized these using behavioral analysis, tracking wallet software patterns and digital footprints.

Funds ultimately flowed to Russian platforms, including sanctioned exchange Cryptex and Audi6 ($7M deposited). A 'consistent on-chain signature' indicates a single Russia-based group. This underscores Russian exchanges' role in illicit finance, evading global enforcement amid persistent state-linked threats.

Makala yanayohusiana

Illustration of a hacked Polymarket wallet showing $520,000 being drained on the Polygon blockchain.
Picha iliyoundwa na AI

Polymarket internal wallet drained of over $500,000

Imeripotiwa na AI Picha iliyoundwa na AI

A private key compromise led to a drain of more than $520,000 from a Polymarket-linked wallet on the Polygon blockchain on May 22. The prediction market platform confirmed that user funds and core contracts remained unaffected.

North Korean state-backed hackers have stolen more than $6 billion in cryptocurrency since 2017, accounting for 76% of all crypto hack losses in 2026. The groups, including Lazarus and DPRK, drained $577 million from DeFi platforms in April alone. TRM Labs highlighted a shift to sophisticated tactics, including in-person social engineering.

Imeripotiwa na AI

Thorchain confirmed a suspected multichain exploit on May 15 that drained about $10 million from users across several networks. The protocol activated emergency halts and has now launched a recovery portal for affected wallets.

Alhamisi, 25. Mwezi wa sita 2026, 17:02:55

CoinEx denies knowledge of $3.84 billion flows to sanctioned Iranian entities

Jumapili, 21. Mwezi wa sita 2026, 10:38:42

Three crypto wallets profit $24 million on World Cup bets

Jumanne, 26. Mwezi wa tano 2026, 13:47:01

StablR suspends stablecoin services after cyberattack

Alhamisi, 14. Mwezi wa tano 2026, 13:53:09

Tether and partners freeze $450 million in illicit crypto funds

Jumanne, 12. Mwezi wa tano 2026, 21:15:24

North Korea linked to majority of 2025 crypto hack losses

Tovuti hii inatumia vidakuzi

Tunatumia vidakuzi kwa uchambuzi ili kuboresha tovuti yetu. Soma sera ya faragha yetu kwa maelezo zaidi.
Kataa