BitoPro has released its latest statement regarding the May 9th security incident, confirming that the attacker is the North Korean hacker group Lazarus Group

Taiwanese cryptocurrency exchange BitoPro has released its latest statement and progress update regarding the security incident on May 9th. According to the investigation report issued on June 11th, no internal personnel were found to be involved in the incident, and the attack methods were similar to the international attack patterns of the North Korean hacker group "Lazarus Group" in the past, including asset theft incidents imitating the global bank SWIFT system and cryptocurrency exchanges. By bypassing multiple security protections through social engineering and malicious software, during the platform wallet system upgrade and asset transfer period, disguising normal operations to steal hot wallet assets. After the incident, BitoPro initiated emergency response measures, including shutting down the hot wallet system, replacing encryption keys, isolating and rebuilding affected systems, etc. On May 19th, BitoPro proactively provided the hot wallet address to the on chain data tracking platform Arkham for updating the platform's liquidity data. As of June 19th, some wallet addresses have been updated and users can check them through the Arkham platform. Previously, ZachXBT reported that Taiwan Stock Exchange BitoPro was suspected to have been hacked on May 8th, resulting in a loss of approximately $11.5 million.