Alphapo, a crypto provider for gambling sites, e-commerce, and other online platforms experienced an attack on 23 July, with initial losses estimated at $23m (£19.7m) on Ethereum, TRON, and Bitcoin. 

Blockchain investigator “ZachXBT” alledges to have uncovered an additional $37m (£31.7m) stolen on TRON and Bitcoin, bringing the total to near-$60m. At the same time, ZachXBT said the attack showed signs of the Lazarus Group’s “very distinct fingerprint on-chain.”

Hack update: An additional $37M stolen on TRON & BTC from this hack has been located.

This now brings the total amount stolen to $60M.

This hack appears to likely have been done by Lazarus as they create a very distinct fingerprint on-chain. pic.twitter.com/ACGSXiDwW3

— ZachXBT (@zachxbt) July 25, 2023

The involvement of the Lazarus Group is not independently confirmed by either DIGIT or Alphapo at this time. 

On the same day as the Alphapo attack, crypto payment gateway CoinsPaid experienced a $37.3m (£28.7m) attack. 

“We suspect Lazarus Group, one of the most powerful hacker organisations, is responsible,” said CoinsPaid in a release today.

CoinsPaid claims customer funds remain intact, and while its services were down for four days, its operations are back up and running in a limited capacity. 

Alphapo on the other hand has been rather quiet following the attack, but confirmed to Cointelegraph that they were reinstating deposits and withdrawals through new addresses. 

The notorious Lazarus Group is classified as a North Korean state-sponsored hacking group by the FBI. Analysts believe that the group’s activities partially fund the country’s weapons development programmes. 

Recommended

• Lazarus Group Targets Windows Internet Information Services
• Kaspersky Uncovers Mass ‘Spyware Campaign’
• SMBs Suspected of Covering Up Cyber Attacks

The group’s victim list includes some of the world’s largest companies. Recently, the group hit Atomic Wallet for $35m (£26.9m), Harmony Horizon for $100m (£76.9m), and is allegedly responsible for one of the largest crypto hacks in history: the $617m (£474.9m) Axie Infinity attack. 

In response, CoinsPad says it will organise a round table with all victims to launch a new initiative aimed at minimising and preventing future attacks. 

“We urge Binance, Kraken, Coinbase, Bitfinex, OKX and others to participate in this vital process,” says CoinsPad.