Japan's SBI Crypto hit by $21 million exploit, funds sent to Tornado Cash: ZachXBT

Partner offers
The Block may may earn a commission if you use our partner offers, at no extra cost to you.

Quick Take

  • Online sleuth ZachXBT said a week ago, “addresses linked to” the Japanese financial firm SBI Group had about $21 million worth of Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash stolen.
  • The attack exhibits similarities to other exploits connected to North Korean hackers.

An exploit bearing similarities to other North Korean hacks has resulted in roughly $21 million being stolen from a major Japanese financial firm, according to online sleuth ZachXBT.

In a post on Wednesday, ZachXBT said that on Sept. 24, "addresses linked to" SBI Crypto, a subsidiary of SBI Group, had Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash worth approximately $21 million extracted and then deposited to Tornado Cash.

The attack exhibits similarities to other exploits connected to North Korean hackers, ZachXBT said. Blockchain security firm Cyvers helped with the investigation, they added.

SBI Group didn't immediately respond to a request for comment.

ZachXBT is one of the most prolific crypto sleuths, famous for identifying instances of people and firms losing funds due to illicit activity. In June, ZachXBT said the Iranian cryptocurrency exchange Nobitex appeared to have been exploited for over $80 million across Tron and EVM-compatible chains.

Earlier this year, Arkham Intelligence said Lazarus Group, widely believed to be sponsored by North Korea, hacked Bybit for over $1.5 billion, citing information provided by ZachXBT.

Tornado Cash has long been scrutinized for being a platform where hackers can launder stolen funds. In 2023, Roman Storm was charged with conspiracy to commit money laundering and sanctions violations for operating Tornado Cash. The Treasury Department’s Office of Foreign Assets Control sanctioned Tornado Cash in August 2022.


Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2025 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

AUTHOR

RT Watson is a senior reporter at The Block who covers a wide array of topics including U.S.-based companies, blockchain gaming and NFTs. Formerly covered entertainment at The Wall Street Journal, where he wrote about Disney, Netflix, Warner Bros. and the creator economy while focusing primarily on technological disruption across media. Previous to that he covered corporate, economic and political news in Brazil while at Bloomberg. RT has interviewed a diverse cast of characters including CEOs, media moguls, top influencers, politicians, blue-collar workers, drug traffickers and convicted criminals. Holds a master's degree in Digital Sociology.

See More
Connect on

Editor

To contact the editor of this story: Jason Shubnell at [email protected]

WHO WE ARE

The Block is a news provider that strives to be the first and final word on digital assets news, research, and data.

+ Follow us on Google News
Connect with the block on