ZachXBT: $1.2M Theft Address Likely Belongs to THORChain Founder John-Paul
Prefer us on Google
BlockBeats News, September 12th, On-chain detective ZachXBT commented on the "A THORChain User Was Hacked for $1.2 Million" incident, suggesting that the address may belong to THORChain founder John-Paul Thorbjornsen (JP, @jpthor), whose private wallet was compromised a few days ago due to a fake conference scam. "JP is one of those who has greatly benefited from laundering money through North Korean hacker attacks/vulnerability exploits. Therefore, he suffered losses due to a North Korean-related retaliatory attack, somewhat echoing the idea of karma."
BlockBeats Note: JP's "relationship" with North Korean hackers (mainly the Lazarus Group) is not direct cooperation or personal contact but stems from the THORChain protocol's stance in the 2025 Bybit exchange hack incident. In February 2025, North Korean hackers stole around $1.4 billion worth of cryptocurrency from Bybit, making it one of the largest crypto thefts in history. These hackers then used THORChain as the primary tool to launder the stolen funds, bridging 85% of the stolen funds (approximately $1.2 billion) and converting them into other assets to evade tracking.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
DeFi has reached its most dangerous moment: the real vulnerabilities are not in the code
THORChain has released a recovery plan for the attack incident, and voting for node operators has begun
Cryptocurrency Market Update: Major Developments and Insights
Key Takeaways Sky co-founder Rune Christensen has leveraged strategic moves to short the S&P 500 and invest in…
Kelp DAO Exploit Fallout Deepens as Attacker Routes $175M in ETH via Privacy Rails
Key Takeaways: The attacker moved $175 million in stolen ETH to new wallets using privacy tools. The exploit…
Three major DeFi attacks in five days, with a total of 14 cryptocurrency hacking incidents in May
Chainalysis tracks the source of the THORChain attack: skilled in money laundering, the attack was carried out weeks after cross-chain fund movements
THORChain: RUNE transfers are expected to resume in 12 hours, the attack may be due to the GG20 TSS vulnerability
THORChain has not initiated any refund, airdrop, or compensation plans, reminding the community to be vigilant against fraud
The Balancer hacker has currently exchanged 14,300 ETH for 419.3 BTC
Data: Balancer hackers today exchanged 7,000 ETH for 204.7 BTC, worth approximately 15.88 million USD
Kelp DAO Attacker Transfers $175M in Ether Following Exploit
Key Takeaways: The Kelp DAO exploiter has moved $175 million worth of Ether, part of a larger $290…
Kraken users fell victim to a social engineering attack, resulting in 8,662 ETH being stolen and transferred to HitBTC
ZachXBT: A certain Kraken user is suspected of being a victim of social engineering fraud, resulting in a loss of 18.2 million dollars
Shield Wall: THORChain Suffers Attack, Loses Around $1.2 Million
Vitalik Discusses Ethereum Scaling Path, Circle Announces Partnership with Polymarket, What's the Overseas Crypto Community Talking About Today?
BTC Whale Swaps to ETH Again, Moving $38.84M in Value
Ripple and SBI Team Up for RLUSD Stablecoin Launch in Japan by Early 2026
Latest Crypto Market Snapshot as of August 22, 2025 BTC Soars to $115,250.00 ETH Hits $4,450.75 XRP Climbs…
$190 Billion in 24 Hours: What's Really Driving Bitcoin and Ethereum's Biggest Rally of the Summer
Bitcoin and Ethereum surged in a historic 24-hour rally that added $190 billion to the crypto market and triggered $2.98 billion in liquidations. Here's what Treasury buybacks, a massive short squeeze, and new SEC rules mean for traders on WEEX.
Wall Street Morning Briefing: Besant Presses Long Bond 'Stop Loss' Button, Gold and Bitcoin Surge; Moderna Ignites Pharma Bull Market, AI Momentum Stocks Liquidated
Full Speech by Wang Xingxing at the 2026 World Robot Conference: Embodied Intelligence of ChatGPT Will Arrive in Two to Three Years at the Fastest
Arthur Hayes: Waiting for Fed Signals to Reload for the Crypto Bull Market
AI agents could make today's billion-dollar crypto hacks look like 'pennies,' industry leaders warn
Surge in AI Debt Financing in the U.S. May Draw Market Attention in September
White House Meeting Overview: What Did Trump Say?
Is Venture Capital Dead? A "Letter of Advice" to All Soon-to-be Obsolete Fund Managers
China Expands Digital Yuan Operating Network to 30 Institutions, Adding 8 Local Banks
Tipping in the United States: Customs and Suggested Amounts to Avoid Overspending
Trillion-Dollar Consumer Loan Market: Key Players Missing
Exports: The First Effects of Agreements with the US and the EU Emerge, with Beef as the Star Product
Interpretation of SEC's New Crypto Regulations: No Registration Required for Fundraising Below $5 Million, Is the Altcoin Season Coming Back?
DeFi has reached its most dangerous moment: the real vulnerabilities are not in the code
THORChain has released a recovery plan for the attack incident, and voting for node operators has begun
Cryptocurrency Market Update: Major Developments and Insights
Key Takeaways Sky co-founder Rune Christensen has leveraged strategic moves to short the S&P 500 and invest in…
Kelp DAO Exploit Fallout Deepens as Attacker Routes $175M in ETH via Privacy Rails
Key Takeaways: The attacker moved $175 million in stolen ETH to new wallets using privacy tools. The exploit…
Three major DeFi attacks in five days, with a total of 14 cryptocurrency hacking incidents in May
Chainalysis tracks the source of the THORChain attack: skilled in money laundering, the attack was carried out weeks after cross-chain fund movements
