NullMeridianLog

Sep 2023 (incident); FBI attribution follows

Stake.com: Hot-Wallet Theft Attributed by FBI to Lazarus ($41M)

FBI: Lazarus Group stole $41 million from Stake.com. Stake said unauthorized ETH/BSC hot-wallet transactions were contained and operations resumed; user funds said safe.

  • Event date
  • Incident typeExchange hot-wallet compromise
  • Bug classSocial engineering
  • Published

Loss, as sourced

$41 million, per FBI. Stake's reflection emphasizes containment and user-fund safety.

Traceability

Primary sources

  1. 01fbi.govFBI press release (opens in a new tab)
  2. 02medium.comStake.com reflections (opens in a new tab)

In brief

Root cause: FBI attributes to Lazarus Group. Stake describes unauthorized hot-wallet transactions.

Timeline, as sourced: Early Sep 2023 unauthorized transfers; containment; later FBI attribution.

Account, as sourced

Claimed (FBI): Lazarus responsible for $41M theft from Stake.com.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.