According to @justinsuntron, TRM Labs traced recent wallet drains tied to the 2022 LastPass breach and detailed how the stolen crypto moved through mixers and off-ramps, underscoring ongoing relevance for traders monitoring on-chain flows, source: Justin Sun on X https://twitter.com/justinsuntron/status/2005503336485888076 and TRM Labs blog https://www.trmlabs.com/resources/blog/trm-traces-stolen-crypto-from-2022-lastpass-breach-on-chain-indicators-suggest-russian-cybercriminal-involvement. TRM Labs reports that on-chain indicators suggest Russian cybercriminal involvement in these movements, which it mapped across transaction paths and services, source: TRM Labs blog https://www.trmlabs.com/resources/blog/trm-traces-stolen-crypto-from-2022-lastpass-breach-on-chain-indicators-suggest-russian-cybercriminal-involvement. Justin Sun emphasizes that recent hacks and drains show why on-chain visibility still matters for traders tracking potential inflows and exits, source: Justin Sun on X https://twitter.com/justinsuntron/status/2005503336485888076.

According to the source, a new report claims North Korea–linked hackers have stolen around $2 billion in crypto this year, spotlighting elevated exploit risk for DeFi protocols and cross-chain bridges. According to Chainalysis, DPRK-affiliated groups stole about $1.7 billion in 2022 and over $1.0 billion in 2023, with the majority sourced from DeFi protocol and cross-chain bridge exploits, indicating where smart-contract risk is concentrated for market participants. According to the U.S. Treasury’s Office of Foreign Assets Control, Tornado Cash was sanctioned in August 2022 and Sinbad was sanctioned in November 2023 for laundering DPRK proceeds, increasing enforcement and compliance risk around mixer-linked flows that can affect altcoin liquidity when tainted funds move. According to FBI, CISA, and the U.S. Treasury, the Lazarus Group uses social engineering and supply-chain compromises to breach crypto firms, underscoring persistent operational risk for centralized venues and DeFi traders. According to Chainalysis, on-chain monitoring of inflows from DPRK-labeled wallets to exchanges and mixers can flag potential cash-out activity after breaches, which traders can track as a proxy for near-term sell pressure in affected assets.