SBI Crypto, a unit of Japan’s SBI Group, has reportedly lost about $21 million in a suspected hack. The loss was discovered by blockchain investigator ZachXBT, who shared details showing unusual transfers from the company’s crypto wallets. He said the addresses linked to SBI Crypto were drained in late September, marking one of the largest recent crypto thefts connected to a Japanese firm.

The attack involved several digital coins, including Bitcoin, Ether, Litecoin, Dogecoin, and Bitcoin Cash. ZachXBT explained that on September 24, wallets tied to SBI Crypto saw sudden fund movements worth roughly $21 million. He later discovered that the funds were shared among multiple exchange accounts. This shows that the attack was a well-planned one.

In a Telegram post, ZachXBT said the stolen coins were moved through five instant exchanges before ending up in Tornado Cash. Tornado Cash is a crypto mixing platform banned by U.S. authorities for helping to hide the trail of illegal funds. He added that several signs link the attack to state-backed North Korean hackers.

Investigators Link the Attack to North Korea

ZachXBT said the movement of funds showed strong similarities to tactics used by the Lazarus Group, a well-known North Korean hacking team. He noted that the group often uses mixing tools like Tornado Cash to hide stolen assets from law enforcement. Experts said these groups have stolen billions of dollars’ worth of digital currencies from companies worldwide.

The Lazarus Group has been active for years and is often linked to cyberattacks on exchanges and blockchain firms. Investigators said the group uses complex methods to move funds across many wallets, making tracking almost impossible. Regulators said such activities affect the crypto market and threaten investors’ safety.

Authorities also shared that they are focusing on Tornado Cash in their investigations. The platform was banned in the U.S. because criminals used it to hide stolen crypto. However, some individuals still use it to move secret funds despite the ban.

SBI Group has not yet shared any public statement about the reported hack. The large financial firm, which runs businesses in both traditional finance and digital assets, has also not responded to media requests for comments. Outlets, including CoinDesk, said they reached out to SBI but got no official reply.

Analysts said the company may still be checking its systems to know the exact amount that was lost in the hack. Others believe that many firms facing similar issues often delay public comments to avoid panic among clients and investors. Many individuals said it is important for companies to be transparent, especially when incidents involve customers’ funds or the market.

Other Recent Security Risks in Crypto

The SBI case came shortly after another major cyber risk was reported last month. Hackers carried out a supply chain attack on JavaScript packages hosted on the Node Package Manager registry. The breach put large amounts of cryptocurrency at risk.

The affected packages had been downloaded more than a billion times, raising concern about how widespread the risk could be. Although no large-scale theft was confirmed, experts said the incident showed how cybercriminals continue to evolve and exploit weak spots in digital finance systems.

Security experts said the SBI case highlights the ongoing threat to digital platforms. They explained that hackers continue to target major firms because of the huge value of crypto assets. The digital world expects regulators to provide better security standards and to ensure that exchanges are inspected carefully to protect investors.

SBI Crypto’s $21 million loss shows how online scams can affect many. Investors believe the method used in the hack is similar to the ones used in the past. They said this method has been used by North Korean groups. Companies are now focusing on creating better security that will stop scams before they happen. They are also looking for better ways to track and restore stolen funds.

Frequently Asked Questions

Q: What happened to SBI Crypto?

A: The company announced that it lost about $21 million after hackers stole coins like Bitcoin, Ether, and Litecoin from several of its wallets.

Q: Who is believed to be behind the hack?

A: Investigators said they think North Korean Lazarus Group has something to do with the scam. This group is known for stealing cryptocurrencies from firms worldwide.

Q: Did SBI Group issue any statement?

A: No, the company has not yet shared any public comments about the attack.