Blockchain analytics firm Chainalysis revealed that an unidentified hacker breached its systems this month, accessing non-sensitive customer data. The attacker obtained user IDs, full names, email addresses, and organization role labels, but no sensitive information like passwords or investigation content was compromised. Chainalysis has engaged third-party cybersecurity experts and is using large language models to review its platform's security. The company advised affected customers to enable two-factor authentication and monitor for suspicious activities.
Chainalysis clarified that the breach is unrelated to the recent $6.3 billion hack at Binance, which was attributed to North Korean hacking groups. The Binance hack involved compromising an engineer's laptop and using EIP-7702 to turn a hot wallet into a sweeper contract. Chainalysis noted that the attackers employed never-before-seen laundering patterns, circulating funds among addresses to obscure the trail.
On the Tron network, the Binance hackers used DeFi lending protocols like JustLend to avoid stablecoin freezes. They swapped TRX for stablecoins, deposited them in JustLend for receipt tokens, and then moved these tokens to clean wallets. This method allowed them to redeem stablecoins and bridge funds off Tron, swapping them for ETH. Chainalysis reported that around $2.8 billion in stablecoins have already been frozen by issuers like Circle and Tether.