The addresses linked to SBI Crypto, a subsidiary of the financial giant of Japan SBI, saw suspicious outings worth around $ 21 million on September 24, 2025, according to the engineer of the Zachxbt blockchain.
Stolen funds included Bitcoin ether ,, ,, And . The loot was then channeled on five instant exchanges before being deposited in tornado species, a crypto mixture service which was previously sanctioned by the American treasury.
In a telegram post, Zachxbt noted that several indicators resemble tactics used in previous cyberattacks supported by the North Korean state, which raises fears that this incident could be another in a series of crypto cries linked to the RPRC.
SBI Crypto works as a mining pool as part of a SBI group, a financial conglomerate on the stock market in Japan with significant exposure to traditional and digital assets.
During the publication, the SBI group did not publicly disclose the incident or published official response. The SBI group also did not respond to the request for Coindesk comments.
The hacking groups linked to North Korea, in particular the Lazare group, have been linked to billions of digital assets stolen in recent years. Funds are often bleached by decentralized mixers such as cash tornado, despite global regulatory repression.
