Apart from market malaise, crypto also facing a number of security risks

26/06/2022

new delhi, jun 25: The world of crypto isn’t just suffering from a market malaise that has seen the price of Bitcoin drop from $69,000 to around $20,000 today it also faces a troubling number of security risks.
There have been dozens of breaches in the past few years showing that cybercriminals are gravitating toward the world of cryptocurrencies.
In many cases, we don’t know who the attackers are, but one culprit that keeps coming up is the band of state-backed hackers from North Korea known as the Lazarus Group. According to a new book by Geoff White, “The Lazarus Heist,” the regime’s hackers have been become increasingly sophisticated over the past decade, managing to steal an estimated $2 billion worth of cryptocurrency to date.
Crypto investors should expect the gang to continue exploiting blockchain targets, or the “the soft underbelly of the financial system,” according to White, who believes the $2 billion figure is a “vast underestimate.” It stands to reason the hacker group would target crypto networks: Lazarus’s modus operandi for years has been to generate as much cash as it could to help prop up the North Korean regime and its nuclear weapons program. In the past decade, its schemes have included sophisticated ATM hacks and ransomware, including the infamous WannaCry cyber attack.
Now decentralized finance, or DeFi, has become a more lucrative target than banks, thanks to the billions of dollars locked up in its various applications. But the move-fast-and-break-things culture still prevalent in web3 development hasn’t helped the security of those networks. Neither does the fact that building web3 apps is unusually hard for programmers, who can create gaping financial vulnerabilities with simple coding errors.
Across the board, the amount of money lost through hacks of DeFi projects more than doubled in 2021, with security website CrytpoSec listing 102 reported breaches between Jan. 2020 and June 2022, totaling $3.4 billion lost.
Lazarus has gone after several crypto networks, including a Slovakian crypto exchange in 2020 from which it stole virtual currency worth $5.4 million. The hackers went on to launder the funds through the cryptocurrency exchange Binance, according a Reuters investigation. They were also behind the more-than-$600 million hack on play-to-earn-game Axie Infinity, which when measured by money stolen could be one of the biggest single hacks of all time. (The U.S. Treasury Department blamed Lazarus as being behind the attack.) I spoke to White in a Twitter Spaces discussion this past week about the group, and some of its strategies for targeting DeFi networks in the future.
Below is an edited excerpt from that discussion:
Parmy: Do we have any idea of how many people are in the Lazarus group? How are its members selected and trained?
Geoff: In terms of how many there are, there’s a publicly quoted figure, which is 6,000, which has come from analysis of testimony from defectors who’ve come out of North Korea.
To train these people, the North Korean government can’t rely on hackers in hoodies in bedrooms, kids who just go on YouTube, because in North Korea you can’t just pick up a laptop and go on the Internet. All the computer hackers in North Korea have come up through the school system. They've been spotted and groomed by the regime to go into elite universities, to hone their skills. A lot will go into either the nuclear program or government hacking.

Photo Gallery

BSE Sensex

NSE Nifty