Lazarus Under The Hood
First seen: 2017-04 •
Last seen: 2026-05
#EasyFi • 2021-04
EasyFi lost about $6 million in stablecoins and roughly $53 million in EASY tokens after mnemonic keys tied to administrative transfer capability were compromised, with evidence pointing to a compromised machine and weak operational controls rather than a smart contract exploit. ZachXBT later included EasyFi in a set of cryptocurrency thefts traced to Lazarus Group, also described as Bluenoroff or APT38, involving hot-wallet breaches, private-key compromise, malicious transaction approvals, and modified MetaMask activity.
3
Related Reports
1
Affected Countries
62
Months Since
Lazarus Under The Hood