LABScon 2025 Talk Examines Crypto Theft, Developer Compromises, and Laundering
Summary
Andrew MacPherson’s LABScon 2025 talk surveys crypto theft, including the claimed $1.5 billion Bybit heist, developer and supply-chain compromises, and laundering through cross-chain swaps, mixers, and non-KYC platforms.
Key points
- The talk estimates crypto crime has involved approximately $9 billion in illicit funds.
- Many crypto applications depend on browser frontends and wallet extensions, concentrating risk at the client-side interaction layer.
- The talk describes the Bybit heist as involving a compromised developer machine and altered production JavaScript used to authorize a wallet drain.
- Supply-chain risks discussed include typosquatting, compromised GitHub accounts, and “drainers as a service.”
- The talk describes cross-chain swaps, Tornado Cash, and non-KYC platforms as laundering methods that complicate fund tracking.
Article Details
- Topic
- Crypto crime attack patterns targeting DeFi applications, developer environments, and supply chains, including the Bybit heist and laundering methods.
People
Products
BybitHe details major attack patterns including the $1.5 billion Bybit heist, developer machine compromises and production JavaScript tampering, and discusses laundering methods like cross-chain swaps and Tornado Cash.Tornado CashHe details major attack patterns including the $1.5 billion Bybit heist, developer machine compromises and production JavaScript tampering, and discusses laundering methods like cross-chain swaps and Tornado Cash.
Industries
CryptocurrencyAndrew’s presentation is essential viewing for anyone interested in cryptocurrency and cybersecurity, especially those looking to understand the technical realities of financial crime in the decentralized era.Decentralized finance (DeFi)Andrew demystifies the technical landscape and exposes the sophisticated attack vectors plaguing the decentralized finance (DeFi) space.