News for hackers. Stuff that matters.

A comment on Nomad drained of $150m due to a coding mistake. Parent comment

Re:Nomad drained of $150m due to a coding mistake by rchaud on Tuesday August 02, 2022 @12:03PM (#32320447)
Replace the Tokyo nightclub with an air-conditioned military intelligence office in Pyongyang, where crypto is flooding in via ransomware payments and web3 exploits. That's the reality and it would still be quite sensational....as a Tom Clancy novel.
[ Parent | on HN ]
Re:Nomad drained of $150m due to a coding mistake by kelseyfrog on Tuesday August 02, 2022 @12:27PM (#32320796)
That could just as easily be a chapter in Neal Stephenson's Cryptonomicon.
[ Parent | on HN ]
Re:Nomad drained of $150m due to a coding mistake by woodruffw on Tuesday August 02, 2022 @02:54PM (#32322808)
Do you have evidence that North Korea makes up any significant amount of "Web3" exploits?

From my vantage point, it seems to be mostly bored twentysomethings.

[ Parent | on HN ]
Re:Nomad drained of $150m due to a coding mistake by danielvf on Tuesday August 02, 2022 @04:19PM (#32323770)
I don't think this one was North Korea. And yes, most aren't.

North Korean cryptocurrency hacks are a bit distinctive. Rather than finding logical bugs in contracts, they tend to use traditional spearphishing / social eng to get targeted people to run malware which they try to pivot to stealing keys / access credentials. Then after a hack, most crypto hackers try to obfuscate and store their stole coins on chain somewhere. North Korea already has a large and practiced money laundering network, so after a hack the money immediately starts going to hundreds of different places in the real world, perhaps to mules or to faked accounts in Southeast Asia.

[ Parent | on HN ]
Re:Nomad drained of $150m due to a coding mistake by Nitramp on Wednesday August 03, 2022 @07:26AM (#32330242)
https://www.cisa.gov/uscert/ncas/alerts/aa22-187a

Google: "North Korea Ransomware"

[ Parent | on HN ]
Re:Nomad drained of $150m due to a coding mistake by woodruffw on Wednesday August 03, 2022 @11:44AM (#32333268)
Where's the connection? Ransomware is the other side of the equation: using things like bitcoin to launder money. That's substantially different from exploiting cryptocurrencies.
[ Parent | on HN ]