Stake.com was robbed on or about September 4, 2023 after funds were taken from Stake-controlled Ethereum, Binance Smart Chain and Polygon addresses, with FBI attribution assigning the theft to DPRK Lazarus Group actors also known as APT38. TRM described subsequent laundering through swaps, Squid Router, Avalanche, wrapped BTC, Bitcoin bridging and mixer-oriented routes, aligning the incident with other Lazarus-linked 2023 cryptocurrency thefts from Alphapo, CoinsPaid and Atomic Wallet.