Crypto investigators flag suspected $106M theft, $786K Solana bot drain

An unidentified entity in the European Union may have lost more than $106 million from accounts at multiple cryptocurrency exchanges on Sunday, according to blockchain investigator ZachXBT.

In a Monday post, ZachXBT said funds suspected to have been stolen were withdrawn in USDC and USDT before being moved through several cryptocurrencies and blockchains.

The suspected attacker swapped USDC for Ether (ETH), used instant exchange services including WellWallet and Kyrrex, and converted funds into Monero (XMR) through the swap service Wagyu.

Source: ZachXBT Telegram post

The suspected attacker remains unidentified, though ZachXBT said the movement of funds pointed away from a link to North Korea’s Lazarus Group. The affected entity and exchanges involved have not been publicly named.

ZachXBT identified 11 wallet addresses associated with the funds.

The reported theft follows the $6.3 billion Binance hack on Oct. 29, which the FBI has attributed to North Korean hackers known as “TraderTraitor,” a group linked to Lazarus. The attack was the largest cryptocurrency theft on record.

Related: Binance net outflows surge to $5.8B as withdrawals resume after record hack

Wallet associated with Solana arbitrage bot may have lost $786K