Исследователь обнаружил нераскрытый взлом DWF Labs на $44 млн

cryptonews.ruPublished on 2025-07-03Last updated on 2025-11-04

За инцидентом 2022 года предположительно стоит группировка из КНДР

В сентябре 2022 года маркетмейкер DWF Labs, вероятно, пережил взлом на сумму более $44 млн. Компания публично не раскрывала атаку, обратил внимание ончейн-исследователь под ником tanuki42.

1/8 It's likely that the market maker @DWFLabs was compromised in September 2022 by a DPRK-affiliated threat actor called AppleJeus, resulting in a theft of at least $44M+ composed predominantly of USDC and USDT.

As of November 2025, DWF has not publicly confirmed any incident. pic.twitter.com/HGXGUoJaqc

— tanuki42 (@tanuki42_) November 4, 2025

Атака началась 22 сентября с опустошения одного из адресов проекта. Затем на тот же кошелек стали поступать криптовалюты с централизованных бирж, что говорит о компрометации закрытых ключей и учетных данных.

Источник: X.

Хотя атака длилась более пяти часов, ни одной успешной попытки остановить вывод средств со стороны DWF Labs предпринято не было, добавил tanuki42.

На следующий день, 23 сентября, в хакеры совершили еще одну предположительное «опустошение».

Источник: X.

Украденные активы быстро конвертировали в биткоин через мост Ren Protocol. После этого монеты долго находились без движения, но недавно их начали переводить в криптомиксер Mixero.

По словам исследователя, стратегия атаки и отмывания может говорить о причастности северокорейской группировки AppleJeus. Через аналогичные сервисы хакеры выводили активы после взлома Deribit, Tower Capital и Radiant.

Атакованный кошелек аналитик связал с DWF Labs, поскольку он взаимодействовал с адресом Yield Guild Games, который сотрудничает с маркетмейкером.

Источник: X.

Предполагаемый кошелек DWF Labs также перемещал средства на казначейский адрес MagnifyCash (ранее NFTY Finance). В тот же день в соцсетях маркетмейкер объявил о стратегическом партнерстве с проектом.

Связанные с атакой активы на сумму около $30 млн все еще остаются без движения, отметил tanuki42. Он запросил помощь в расследовании у ончейн-сыщика ZachXBT и компании по кибербезопасности TRM Labs.

DWF hiding a $44M hack?

Cannot say I’m surprised. pic.twitter.com/AAWgdJeH8Q

— ZachXBT (@zachxbt) November 4, 2025

«DWF Labs скрывает взлом на $44 млн? Не могу сказать, что я удивлен», — прокомментировал ZachXBT.

Напомним, 4 ноября DeFi-протокол Stream Finance приостановил работу после взлома на $93 млн. Эксперты оценили сопутствующий ущерб в $285 млн.

Related Reads

Arca Chief Investment Officer: How Should Tokens Be Valued Once Protocols Start Earning Money?

Title: Arca CIO: How Should Tokens Be Valued When Protocols Start Making Money? Summary: For over a decade, Arca has argued that digital assets should be valued based on fundamentals and future cash flows, just like traditional investments. While tokens are not stocks, basic investment principles still apply. Many decentralized protocols (e.g., Hyperliquid, Aave) are now generating significant, real revenue with high margins. However, protocol revenue alone does not automatically translate to token value. Unlike equity holders who have a legal claim on company assets and future cash flows (via dividends, buybacks, or acquisitions), token holders often lack a clear, enforceable path to receive value from protocol profits. Therefore, the critical link between protocol economics and token economics is even more important. A credible mechanism must exist for value to eventually flow to token holders, with token buybacks being one clear, direct method. Capital allocation is now a key issue for profitable protocols. Like growing companies, protocols should reinvest profits when returns on investment are high. However, this reinvestment only delays value capture; it cannot replace it indefinitely. Investors must believe that eventually, surplus capital will be returned. For example, two protocols with identical revenues should not trade at the same valuation multiple if one has a credible buyback mechanism and the other does not. As the market increasingly accepts this valuation framework, a major opportunity exists. Protocols with strong fundamentals and value-capture mechanisms may see their valuation multiples expand significantly as the historical discount for token-based assets narrows. Crypto investment is finally maturing into fundamental analysis, focusing on revenue growth, margins, competitive advantages, reinvestment returns, and credible paths for profit distribution to token holders.

marsbit10m ago

Arca Chief Investment Officer: How Should Tokens Be Valued Once Protocols Start Earning Money?

marsbit10m ago

Wyoming Moves FRNT from LayerZero to Chainlink CCIP

The Wyoming Stable Token Commission, the state-issued digital dollar issuer, has migrated the Frontier Stable Token (FRNT) from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP). Under a multi-year agreement, CCIP will become the exclusive infrastructure for the token's cross-chain interoperability, providing data and asset transfer between blockchains. FRNT is the first fiat-collateralized stablecoin issued by a U.S. state authority, designed for payments, settlements, and other government and commercial operations. It currently operates on multiple networks including Arbitrum, Avalanche, Base, Ethereum, Hedera, Optimism, Polygon, and Solana. Initially using LayerZero's Omnichain Fungible Token standard for multi-chain issuance, the Commission decided to move away from that system following a review of LayerZero's information disclosure and operational security practices. Wyoming has been developing FRNT's multi-chain model since 2023. The shift to CCIP will maintain the token's availability across multiple public blockchains while upgrading the underlying cross-network transfer infrastructure. According to the Commission, this transition aims to enhance operational security as the state expands its use of digital assets.

cryptonews.ru16m ago

Wyoming Moves FRNT from LayerZero to Chainlink CCIP

cryptonews.ru16m ago

Rain Creates Alliance to Develop AI Payments

Rain, a developer of stablecoin payment infrastructure, has launched the Agentic Payments Alliance (APA), a coalition of companies focused on establishing standards for AI-agent-powered commerce. Initial members include Visa, Mastercard, Circle, Solana, Remitly, Avalanche, Chainalysis, Fiserv, Fireblocks, Uniswap Labs, and Turnkey. The alliance will explore how AI agents can make payments on behalf of users, with a focus on agent authorization, fraud protection, identification, and handling loyalty program benefits. Operating as a collaborative initiative, APA plans to conduct research, develop shared standards, and test solutions for AI agent identification and authorization, while also addressing the regulatory aspects of agent-facilitated payments. Rain has already developed its own Agent Control Layer and Scoped Cards systems, which enable the secure provisioning of payment credentials to AI agents while limiting access to funds. Alliance participants will also gain early access to Rain's Agentic Startup Program, which supports startups building AI-agent-driven commerce solutions.

cryptonews.ru16m ago

Rain Creates Alliance to Develop AI Payments

cryptonews.ru16m ago

Santiment Warns of Contradictory Altcoins Lately! The Situation is Highly Ambiguous: 'Volume and Price Soared, Interest in Them Hit a Record Low!' What This...

Santiment has issued a warning about $ANSEM, a recently launched altcoin on Solana linked to trader Ansem, highlighting a contradictory market situation. Between August 9th and 17th, the token's price surged approximately 60%, and its daily trading volume exploded by 4.7 times, jumping from around $9 million to $44 million in a single day. However, social media activity and interest around the token remained stagnant at record-low levels. This divergence between surging price/volume and flat social engagement suggests that while $ANSEM has regained significant trading attention, the spike has not yet translated into broad-based enthusiasm from retail investors. Analysts indicate that sustained high volume alone does not guarantee a lasting uptrend. The sustainability of the current price movement may depend on whether this trading activity is eventually accompanied by a corresponding rise in social sentiment.

cryptonews.ru41m ago

Santiment Warns of Contradictory Altcoins Lately! The Situation is Highly Ambiguous: 'Volume and Price Soared, Interest in Them Hit a Record Low!' What This...

cryptonews.ru41m ago

SEC Proposal a ‘Significant’ Step Forward From ‘Ill-Suited’ Crypto Rules: Commissioner Peirce

A U.S. Securities and Exchange Commission (SEC) commissioner, Hester M. Peirce, has called a new SEC proposal a significant improvement over what she termed a "misfit" set of crypto rules. Peirce stated that a whole generation has struggled due to the SEC's insistence on applying unsuitable regulations to cryptocurrencies, but the new proposal moves toward "clear, sensible, and enforceable rules for crypto offerings." SEC Chairman Paul S. Atkins also welcomed the initiative, noting in a separate statement that the agency's previous enforcement-heavy approach had driven investment overseas, limiting investor protections domestically. The proposal, announced on Tuesday, outlines new rules aimed at creating a clear and purposeful framework for certain investment contracts involving crypto assets, designed to allow organizations to raise capital while protecting investors. This move comes shortly after the U.S. Senate failed to advance the comprehensive Digital Asset Market Clarity (CLARITY) Act. Atkins had previously stated the SEC was prepared to develop rules for digital assets if the Senate could not pass the CLARITY Act. Meanwhile, Galaxy Digital has lowered its estimated odds of the CLARITY Act passing by 2026 to just 10%, citing numerous unresolved policy questions and the Senate's limited time—only about two to three weeks after reconvening on September 14—to pass it.

cryptonews.ru41m ago

SEC Proposal a ‘Significant’ Step Forward From ‘Ill-Suited’ Crypto Rules: Commissioner Peirce

cryptonews.ru41m ago

Trading

Spot
活动图片