Atomic Wallet users suffered a major cryptocurrency theft across desktop and mobile wallets, with linked reporting tracking stolen funds through laundering patterns associated with North Korea’s Lazarus Group and the Sinbad mixer. Elliptic attributed the theft to Lazarus with high confidence based on transaction flows matching prior Lazarus laundering activity, while Atomic Wallet said it was investigating possible causes including local-device malware, infrastructure breach, malware code injection, or man-in-the-middle attack.