first-half-of-the-2022-reportEN.pdf (5 MB)

SlowMist's 2022 mid-year blockchain security and AML report identifies Lazarus Group as a major cryptocurrency money laundering threat and notes U.S. sanctions against addresses tied to the Ronin Network hack and the Blender mixer. The report says Lazarus activity in early 2022 included Crypto.com unauthorized withdrawals, the IRA Financial Gemini account theft, and the Ronin bridge incident. It describes laundering patterns in which stolen ETH moved through Tornado Cash or exchanges, converted to renBTC, shifted onto Bitcoin, and pooled through mixers such as CoinJoin.