He is everywhere
First seen: 2016-02 •
Last seen: 2026-06
#CoinBerry • 2020-08
CoinBerry was described in linked evidence as a reported hot-wallet incident around 2020-08-24 in which approximately 8.33 BTC was allegedly taken, followed by a pause in withdrawals and later resumed use of the same wallet address. ZachXBT later included CoinBerry among cryptocurrency hacks traced to Lazarus Group, described as Bluenoroff or APT38, in a broader laundering investigation covering exchange, DeFi, and individual-victim thefts.
2
Related Reports
1
Affected Countries
70
Months Since
He is everywhere