Hackers steal record $3.8B during 2022 – Chainalysis Hackers steal record $3.8B during 2022 – Chainalysis
According to the report, 82.1% of the $3.8 billion was stolen from DeFi protocols, mainly via bridge exploits targeting vulnerabilities in code.
3 min read
Updated: Feb. 3, 2023 at 2:36 pm UTC
Cover art/illustration via CryptoSlate. Image includes combined content which may include AI-generated content.
Hackers stole roughly $3.8 billion in 2022, making it a record year for stolen digital assets, according to the latest report from blockchain analysis firm Chainalysis.
According to the report, 82.1% of the amount was stolen from DeFi protocols, mainly via bridge exploits targeting vulnerabilities in code. North Korea-linked hackers Lazarus Group stole roughly $1.7 billion out of the total during the year.
Meanwhile, a new crypto mixer called Sinbad has become hackers’ go-to protocol to wash stolen funds after the demise of Tornado Cash, according to Chainalysis.
Crypto hackers’ record year
According to the Chainalysis report, the trend of DeFi protocols getting hacked which began in 2021, has intensified over 2022.
Funds stolen from DeFi protocols made up 82.1% of the total — roughly $3.1 billion. Compared to the amount stolen in 2021, the number is up 73.3% on an annual basis.
Meanwhile, 64% of the $3.1 billion stolen from DeFi protocols came from bridge exploits over the year. The biggest exploit of the year was Axie Infinity’s Ronin bridge hack in March 2022. Hackers exploited the bridge to steal $612 million and, over the coming months, began moving it through mixers like Tornado Cash and Chip Mixer.
Hackers stole roughly $775.7 million in October 2022, making it the worst month of the year.
Bridge protocols allow for interoperability between blockchains. They facilitate the transfer of cryptocurrency from one blockchain to another by locking assets in a smart contract on the original chain and creating equivalent assets on the second chain.
However, these smart contracts become large centralized repositories of funds, making them a prime target for hackers who can target weaknesses inherent to the code architecture.
North Korea-linked Lazarus Group responsible for bulk of exploits
Cybercriminal syndicate Lazarus Group, which the FBI has linked to the North Korean state, has been the leading perpetrator of cryptocurrency hacks in recent years.
In 2022, Lazarus set a new record by stealing an estimated $1.7 billion through multiple hacks.
According to Chainalysis, North Korea-linked hacking groups tend to favor laundering their funds through custodial mixers, rather than decentralized exchanges, or DEXs.
Following sanctions against Tornado Cash in August 2022, North Korean-linked hackers have allegedly turned to another custodial mixer, Sinbad.
Sinbad Custodial Mixer
Sinbad is a newly established custodial Bitcoin mixer that started promoting its services on the BitcoinTalk forum in October 2022. Chainalysis investigators discovered North Korea-linked hackers sending funds to the service in December 2022, as shown on the Chainalysis Reactor graph below.
Mentioned in this article
Posted In: Crime
Author 
Dorian Batycka
Dorian Batycka is a journalist interested in art and technology. He has previously contributed to CoinDesk, Decrypt, Artforum, Artnet News, the Art Newspaper, and many others. He can be found on Twitter and Instagram @temp_projects, where he often memes his way through current financial and art news, scandals, and events.
Featured Story
Advertise Here
In this article
Bitcoin, a decentralized currency that defies the sway of central banks or administrators, transacts electronically, circumventing intermediaries via a peer-to-peer network.
Ethereum
$3,544.78
Ethereum is a decentralized, open-source blockchain platform that enables the creation of smart contracts and decentralized applications (DApps).
Tornado Cash
$11.1943
Tornado Cash is a decentralized, non-custodial privacy solution built on Ethereum.