Data leak [loss] $21M+

Telegram message by zachxbt

2025-09-24 [vendor] SBI Crypto theft
Primary Source ↗
Financial Loss $21.0M (21,000,000 USD)

Incident Details

Crypto sleuth zachxbt observed $21 million in “suspicious outflows” from SBI Crypto, a crypto mining subsidiary of the Japanese SBI Group. The money was quickly laundered through instant exchanges and Tornado Cash, in ways zachxbt observed were similar to tactics of North Korean crypto thieves.SBI Crypto has not made any public statements addressing the apparent theft.

Total loss estimated at $21,000,000.

Technical Details

Initial Attack Vector
Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Vendor / Product
SBI Crypto theft

Timeline

  1. 2025-09-24 Breach occurred
  2. 2025-09-24 Publicly disclosed