Privacy Crypto Protocol Umbra Takes Down Front-End After Hackers Used It to Move $800K in Stolen Funds
Move follows $280M Kelp exploit suspected to be carried out by North Korean hackers; Tornado Cash co-founder Roman Storm warns the action may not satisfy authorities
En resumen
- Umbra, a privacy-focused crypto protocol, took down its front-end website after discovering around $800,000 in stolen funds was moved through it by hackers connected to recent high-profile exploits.
- The action comes days after the Kelp protocol was exploited for over $280 million, which security researchers suspect was carried out by North Korean hackers.
- Umbra stated it has been working with security researchers and noted that all funds moved through its protocol can be identified.
Resumen generado por IA
Por qué importa
Umbra is a privacy-focused crypto protocol that allows users to hide receiver identity. The protocol has open-source front end, meaning anyone can self-host it. Following the massive Kelp exploit suspected to involve North Korean hackers, Umbra discovered its protocol was being used to move stolen funds. The incident echoes regulatory concerns raised in the Tornado Cash case, where co-founder Roman Storm was convicted despite arguing he couldn't control how the protocol was used.
Privacy-focused crypto protocol Umbra said it has taken down its front-end website to make it more difficult for hackers who have been using it to move funds from recent "high-profile hacks." Umbra posted to X on Tuesday that it is aware that around $800,000 worth of stolen funds was moved via its protocol. It added that it made the decision to move the hosted version of its front end into maintenance mode and would restore it "as soon as we are assured that doing so won't create obstacles to the current recovery efforts." It comes just days after the Kelp protocol was exploited for over $280 million, which is suspected to have been carried out by North Korean hackers. Recent reports pointed to Umbra as among the protocols that the exploiter has been attempting to bridge funds from Ether to Bitcoin. North Korean hacking groups are heavily sanctioned by the US, and multiple crypto platforms have worked to freeze or stifle the hackers' efforts to move the funds. Umbra said, however, that there was "nothing we can do" to stop anyone from using its smart contracts or a local or self-hosted version of its open-source front end. Roman Storm warns front end freeze isn't enough Roman Storm, co-founder of the crypto mixer Tornado Cash, argued the move to pause the front end may not be enough to avoid ire from authorities. Storm was convicted in August of conspiring to operate an unlicensed money transmitting business, despite arguing that he was not in control of how the protocol was used. "Prosecutors in my case called me a liar when I said that I can't control Tornado Cash," said Storm, who beat charges of conspiring to violate US sanctions. He claimed that authorities viewed "changing a front end is the same thing as controlling an entire protocol." Related: Crypto hackers stole $17B over past 10 years: DefiLlama "If you can make changes to the user interface, including further updates through new builds on IPFS, then you are in full control," he added. In its post, Umbra said that its protocol was "useful for protecting the identity of the receiver, not the sender," and wasn't useful for hackers wanting to obscure their money trail. "All the stolen funds moved through the protocol can be identified, and we have been in touch with security researchers who are involved," it added.
Qué observar
Perspectiva de IA — posibilidades, no hechos
US regulators may investigate Umbra similar to Tornado Cash investigation
Posible · En meses
More DeFi protocols may implement voluntary restrictions to avoid regulatory action
Probable · En semanas
Preguntas abiertas
- What specific measures is Umbra implementing to prevent future misuse?
- How much of the $280M from Kelp exploit has been recovered?
- Will US authorities take action against Umbra similar to Tornado Cash?
