- SBI Crypto lost around $21 million worth of cryptocurrency, including Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash, due to unauthorised transfers.
- SBI Crypto is investigating the incident and working to minimise damage.
- The Lazarus Group, a North Korean hacking outfit, is suspected to be behind the attack, which is part of a larger trend of increasing crypto hacks.
Recently, around 21 million dollars worth of cryptocurrency was taken from addresses connected to the Japanese mining outfit SBI Crypto. That blockchain expert ZachXBT spotted the weird transfers first. They involved cryptocurrencies like Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash.
From what people say, the alleged thieves funnelled the money through Tornado Cash and some quick swap services. Still, it left everyone wondering how it went down without more notice. On September 24, 2025, wallets linked to the company recorded unauthorised transfers worth an estimated $21 million through SBI Crypto.
The Role of Tornado Cash
Tornado Cash stepped in as the main mixer for cleaning up those stolen coins. Even though the US Treasury removed it from its blacklist earlier this year, hackers continue to use it to conceal their tracks. Investigators tie it straight to the Lazarus Group, that North Korean outfit backed by the state.
They figure Lazarus pulled off a bunch of big hits before this. The app makes it tough to follow the money trail. In a way, it shows how these tools stick around no matter what regulators do.
Also Read: Crypto.com Cryptocurrency Breach Tied to Scattered Spider Hackers: Report
Similarities to Known Attacks
ZachXBT pointed out a few signs that match up with other jobs linked to North Korea. The Lazarus crew often hits up decentralised exchanges and mixing services to cover their moves. They do it to keep the funds out of sight.
These points show how these advanced groups keep testing the crypto scene. It is not new, but it feels like they get sharper each time. Companies are required to watch for patterns like this one.
SBI Crypto right after the hack
SBI Crypto runs as a mining pool under Japan’s big public company, SBI Group. So far, they have not said a word about the breach in public. Decrypt tried contacting them, but nothing came back right away. SBI Crypto has yet to acknowledge the suspicious transfers.
This silence makes the community question their setup for security and how they handle problems. You would think they would address it quickly to calm things down. Instead, it just adds to the worry about what is really going on inside.
Current Take
Currently, SBI Crypto is investigating what happened and working diligently to investigate the cause, determine the amount of the outflow, and implement measures to minimise the damage. However, the impact on its consolidated financial results is expected to be minor.
SBI Crypto has confirmed that there has been no impact on customers who use their services. Regarding SBI Crypto’s business operations, the company will continue to review them, including potential future restructuring.
Also Read: BNB Chain Hack Alert 2025: Binance Issues Urgent Warning
This mess reminds everyone how risky crypto can be, even with all the growth. Companies need to focus on strong security and being open about issues. The $21 million theft acts as a heads-up for investors and firms to stay on guard. They should push for better protections right now.
Crypto hacks have already topped last year’s totals overall. The industry has to keep pushing back against these dangers, or it will face more hits like this.
Also Read: Crypto Hack Surge: $163 Million Was Stolen in August, Up 15% From July
