TRM Labs tracks LastPass stolen funds, exposes Russian criminal network money laundering routes

fork_in_the_road · 2026-01-21T19:08:47+00:00

The asset loss incident caused by the LastPass hacker attack in 2022 was successfully tracked by TRM Labs, revealing the stolen crypto assets' flow to a Russian cybercrime group. Despite the use of mixing techniques, professional analysis was still able to uncover the source of the funds. Ultimately, the funds flowed into high-risk exchanges Cryptex and Audi6, involving assets exceeding $28 million, highlighting the issue of crypto asset money laundering.

fork_in_the_road

2026-01-21 19:08:47

Abstract generation in progress

The asset loss event caused by the LastPass hacker attack in 2022 still leaves clear traceability on the blockchain. According to recent disclosures by blockchain security analysis firm TRM Labs, they have successfully tracked and confirmed the flow of the stolen crypto assets at that time, and have linked this tracking result to a Russian cybercrime group.

Mixing techniques cannot hide the true trail; TRM Labs’ advanced tracking technology uncovers money laundering routes

Although the hacker group used common industry mixing tools like CoinJoin to try to conceal the transaction trail, TRM Labs employed de-mixing techniques and in-depth transaction behavior analysis to still connect the dispersed fund flows back to the same attack source. This demonstrates that even with mixing protocols, it is difficult to completely evade professional on-chain analysis detection, providing important insights for blockchain security defenses.

Funds ultimately flow into high-risk exchanges, involving over $28 million

According to TRM Labs’ tracking data, the stolen funds were finally transferred to two high-risk exchanges, Cryptex and Audi6. The total assets involved in the case have exceeded $28 million, a scale that warrants vigilance. This discovery further confirms the active role of Russian criminal groups in cross-border crypto asset money laundering, and also highlights the urgent need to establish comprehensive exchange compliance and regulatory mechanisms.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.