SBI Crypto suspected to have suffered a North Korean hacker attack, losing $21 million

BlockBeats News, on October 1, a suspicious outflow of funds occurred from a wallet address related to SBI Crypto, a subsidiary of Japanese financial giant SBI Group, on September 24, 2025, with the amount involved reaching approximately $21 million.

The stolen funds included BTC, ETH, LTC, DOGE, and BCH. These assets were subsequently transferred to five instant exchange platforms and then deposited into Tornado Cash for mixing. In a Telegram post, ZachXBT pointed out that multiple signs resemble previous North Korean state-sponsored cyberattack methods, raising concerns that this incident may be another cryptocurrency theft linked to North Korea.

SBI Crypto, as a mining pool operator under SBI Group, is backed by a publicly listed Japanese financial group with significant presence in both traditional finance and digital assets sectors.