Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Joseph Harris USES Private key and seed-phrase theft
Joseph stole cryptocurrency by finding backup seed phrases and private keys in victims’ cloud accounts and source code.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“There was a hack I did that I made millions of dollars essentially by finding a backup seed”
“I access the private key and it has about $17 million in it”
Joseph Harris USES Cryptsy
Joseph accessed a Cryptsy account, converted the altcoin to Bitcoin, and then converted it to PayPal.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I got into someone’s Cryptsy account”
Lazarus Group ASSOCIATED_WITH North Korea
The Lazarus Group is described as believed to be working on behalf of the North Korean government.
Uncertain Confidence 94% · Geoff White EP 119 Details
“believed to be working on behalf of the North Korean government”
Kim Il ASSOCIATED_WITH North Korea
According to the US government, Kim Il was an operative of the North Korean government.
Attributed Confidence 95% · Geoff White EP 119 Details
“was actually Kim Il, an operative of the North Korean government”
Bobby Sierra ASSOCIATED_WITH Lazarus Group
Jon Wu suspected Bobby Sierra might be a North Korean hacker; later, a US advisory reportedly matched the interview tactics, but the identity was not established as certain in the episode.
Uncertain Confidence 87% · Jon Wu EP 119 Details
“I think I just interviewed a North Korean hacker”
Coincheck hack ASSOCIATED_WITH Lazarus Group
The episode presents the possible North Korean/Lazarus attribution of Coincheck as unresolved and supported only by limited indicators.
Uncertain Confidence 98% · Geoff White EP 119 Details
“It is not clear to me and I don’t think it’s clear to investigators whether this was North Korean”
Ronin Bridge hack ATTRIBUTED_TO Lazarus Group
Security researchers attributed the Ronin attack to the Lazarus Group, according to the episode.
Attributed Confidence 95% · Jack Rhysider EP 119 Details
“many security researchers have attributed this attack to be the work of the Lazarus Group”
Crypto Neuro Trader ATTRIBUTED_TO Lazarus Group
The recorded 2020 case involving Crypto Neuro Trader is attributed by US investigators to the Lazarus Group.
Attributed Confidence 94% · Geoff White EP 119 Details
“the Lazarus Group apparently got away with $11.8 million”
KuCoin hack ATTRIBUTED_TO Lazarus Group
The episode says the KuCoin attack was firmly attributed to North Korea and matched prior North Korean crypto-heists.
Attributed Confidence 95% · Jack Rhysider EP 119 Details
“This one is firmly attributed to being North Korea”
WannaCry ATTRIBUTED_TO Lazarus Group
The WannaCry attack was attributed to the Lazarus Group, according to the episode's discussion.
Attributed Confidence 98% · Geoff White EP 119 Details
“the WannaCry attack was also attributed to the Lazarus Group”
NiceHash hack ATTRIBUTED_TO Lazarus Group
According to the FBI, the NiceHash theft was the work of the Lazarus Group.
Attributed Confidence 95% · Geoff White EP 119 Details
“according to the FBI, this was the work of the Lazarus Group”
Marine Chain ICO ATTRIBUTED_TO North Korea
The Marine Chain ICO is described as a North Korean front operation, although the account is based on later investigation and reporting.
Explicit Confidence 96% · Geoff White EP 119 Details
“it does turn out to be a North Korean front operation”
Celas Trade Pro ATTRIBUTED_TO Lazarus Group
Celas Trade Pro is described as a malicious cryptocurrency trading application allegedly launched by the Lazarus Group.
Attributed Confidence 93% · Geoff White EP 119 Details
“the hackers behind it who are allegedly the North Korean Lazarus Group”
NiceHash hack COMPROMISES NiceHash
The attackers gained access to NiceHash systems and drained cryptocurrency from its wallets.
Explicit Confidence 99% · Jack Rhysider EP 119 Details
“this attacker got into NiceHash’s systems and found where the private keys were”
KuCoin hack COMPROMISES KuCoin
Hackers gained access to KuCoin's wallets and removed multiple types of cryptocurrency assets.
Explicit Confidence 97% · Geoff White EP 119 Details
“once the hackers got in. Because once they get in, it’s not just one wallet they have access to. If they’ve got this kind of blanket backdoor access, they’ve got access to the entire safe and whatever’s in there, so they start pulling out this money”
Coincheck hack COMPROMISES Coincheck
The Coincheck exchange was hacked and its NEM hot wallet was emptied.
Explicit Confidence 99% · Geoff White EP 119 Details
“someone hacked into this exchange ... and found the Nem hot wallet. They emptied the whole thing”
NiceHash hack INITIAL_ACCESS_VIA phishing
Employees at NiceHash received phishing emails, and an employee apparently clicked one, opened its attachment, and became infected.
Explicit Confidence 99% · Geoff White EP 119 Details
“Employees at NiceHash start to get phishing e-mails sent to them”
Ronin Bridge hack INVOLVES Axie Infinity
The Ronin network supported deposits for the Axie Infinity NFT game and held substantial associated funds.
Explicit Confidence 98% · Jack Rhysider EP 119 Details
“There’s this NFT game called Axie Infinity which is one of the first NFT games out there and it’s also one of the most popular. To play it, you need to deposit your money into this Ronin network”
KuCoin hack INVOLVES ERC-20
ERC-20 tokens were among the assets stolen in the KuCoin attack.
Explicit Confidence 99% · Geoff White EP 119 Details
“Some ERC-20 tokens were taken”
NiceHash hack INVOLVES privilege escalation
The attackers escalated their privileges while moving through the NiceHash network.
Explicit Confidence 99% · Jack Rhysider EP 119 Details
“pivoting and escalating their privileges”
Coincheck hack INVOLVES NEM
The stolen assets in the Coincheck incident included NEM tokens from the exchange's hot wallet.
Explicit Confidence 99% · Jack Rhysider EP 119 Details
“About 500 million Nem were in that hot wallet”
The WannaCry incident is described as a ransomware cyber-attack that infected hundreds of thousands of devices.
Explicit Confidence 99% · Geoff White EP 119 Details
“the WannaCry cyber-attack, the ransomware attack that hit multiple countries”
Ronin Bridge hack INVOLVES Ronin Bridge
The Ronin Bridge was the conduit targeted in the major crypto-heist.
Explicit Confidence 99% · Geoff White EP 119 Details
“The Ronin Bridge in the middle is the conduit”
Marine Chain ICO INVOLVES Marine Chain
The Marine Chain ICO was the fundraising effort associated with the Singapore-based Marine Chain company.
Explicit Confidence 98% · Jack Rhysider EP 119 Details
“Marine Chain was this cryptocurrency startup. I think they were working on an ICO”
NiceHash hack INVOLVES cryptocurrency wallet private key
The attackers sought NiceHash's Bitcoin wallet private keys in order to empty the wallets.
Explicit Confidence 99% · Jack Rhysider EP 119 Details
“NiceHash’s Bitcoin wallet private keys”