On September 24, 2025, SBI Crypto, a mining-pool subsidiary of Japan’s SBI Group, suffered suspicious unauthorized outflows totaling roughly $21 million to $24 million across Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash wallets. Funds were routed through instant exchanges, Tornado Cash, FixedFloat-linked flows, DEX or aggregator activity, and repeated cross-chain splitting, with several indicators resembling known DPRK attack patterns.