Lazarus Group's Stealth Bridge Exploits
WhisperX has uncovered a sophisticated new modus operandi by North Korea's Lazarus Group, focusing on zero-day vulnerabilities in emerging cross-chain bridges. Intelligence indicates they are not just targeting established DeFi protocols but are actively probing and exploiting pre-release or less scrutinized bridge technologies. These attacks are designed for maximum stealth, often involving staged compromises of oracle networks or validator nodes to inject malicious code that siphons assets during cross-chain transfers. The stolen funds are then rapidly laundered through a complex web of shell companies and mixers, with recent intelligence pointing to initial cash-out points being routed through cryptocurrency exchanges in Hong Kong and Singapore with lax KYC/AML enforcement. This strategy allows for faster asset liquidation before detection.