Hacker drains Russian special services wallets, transfers funds to Ukraine

11 June, 03:14 PM
The hacker stole bitcoins from the FSB and the GRU, and then sent them to Ukraine (Photo:Wendelin Jacober/Pexels)

The hacker stole bitcoins from the FSB and the GRU, and then sent them to Ukraine (Photo:Wendelin Jacober/Pexels)

A hacker gained access to hundreds of cryptocurrency wallets belonging to the Russian special services, and may have transferred stolen bitcoins to Ukrainian aid organizations, cryptocurrency experts now believe.

The mysterious user seems to have been able to put blockchain and Bitcoin technologies to work against the Russian terrorist state.

The hacker gained access to hundreds of crypto wallets that likely belong to Russian security agencies, cryptocurrency industry news site CoinDesk clarified, citing Chainalysis, a cryptocurrency monitoring company that works closely with the U.S. government.

Video of day

Chainalysis analysts believe that the hacker used the transaction documentation feature of the Bitcoin blockchain to identify 986 wallets controlled by Russia’s foreign military intelligence agency (GRU), the Foreign Intelligence Service (SVR), and the Federal Security Service (FSB).

The analysts did not say what feature they were referring to.

At the same time, the hacker left messages in Russian to the owners of the wallets, in which he stated that these wallets were used to pay for the services of hackers working for Russia.

It is not known to what extent these accusations are true. Western analysts consider it indisputable that Russian intelligence services use hackers for numerous operations.Chainalysis experts could only partially confirm the hacker's claims.

They indicate that at least three of the alleged Russian wallets were already linked to Russia by third parties. Two of them were supposedly involved in the SolarWinds attack, and the third paid for servers used in Russia's disinformation campaign in the 2016 U.S. elections.

Chainalysis analysts assume that the hacker gained control of the wallets, which he claims were controlled by Russian special services, possibly through hacking, but maybe even thanks to "inside work."

To put it simply, this person could have infiltrated the structure of hackersworking for Russia, or he could have been an employee of the Russian special services who later became a defector.

The first hacks were carried out a few weeks before Russia's invasion of Ukraine in February 2022.

The hacker initially intended simply to destroy the funds stolen from the Russian intelligence agency wallets. According to Chainalysis, the mysterious attacker invalidated around $300,000 worth of bitcoins using the OP_RETURN function in the Bitcoin blockchain, a function that nullifies previous transactions.

However, after Russia's war with Ukraine began, the hacker changed his mind.

Since the first days of the war, the Ukrainian government has been using cryptocurrency to raise tens of millions of dollars for military and charitable needs.

According to Chainalysis, some of the wallets involved in this investigationtransferred funds to the Ukrainian government's wallets after the full-scalewar broke out.

Simply put, the mysterious hacker stopped burning money and started sending it to help Ukraine.

"The fact that the OP_RETURN sender was both willing and able to burn hundreds of thousands of dollars’ worth of bitcoin in order to spread their message makes it more likely in our opinion that their information is accurate," Chainalysis analysts conclude.

Will you support Ukraine’s free press?

Dear reader, as all news organizations, we must balance the pressures of delivering timely, accurate, and relevant stories with requirements to fund our business operations.

As a Ukrainian-based media, we also have another responsibility – to amplify Ukraine’s voice to the world during the crucial moment of its existence as a political nation.

It’s the support of our readers that lets us continue doing our job. We keep our essential reporting free because we believe in our ultimate purpose: an independent, democratic Ukraine.

If you’re willing to support Ukraine, consider subscribing to our Patreon starting from 5$ per month. We are immensely grateful.

Please help us continue fighting Russian propaganda.

Truth can be hard to tell from fiction these days. Every viewpoint has its audience of backers and supporters, no matter how absurd.

If conscious disinformation is reinforced by state propaganda apparatus and budget, its outcomes may become deadly.

There is no solution to this, other than independent, honest, and accurate reporting.

We remain committed to empowering the Ukrainian voice to push against the muck. If you’re willing to stand up for the truth – consider supporting us on Patreon starting from 5$ per month. Thank you very much.

Will you help tell Ukraine’s story to the world?

Twenty years ago, most people hadn’t even heard of Ukraine. Today, the country is on everyone’s lips and everyone’s headlines. War pushed us on the front page. But there are many other things we do that we are proud of – from music and culture to technology.

We need your help to tell the world Ukrainian story of resilience, joy, and survival. If you’re willing to back our effort, consider supporting us on Patreon starting from 5$ per month. We are immensely grateful.

Follow us on Twitter, Facebook and Google News

Ukraine Today
Fresh daily newsletter covering the top headlines and developments in Ukraine
Daily at 9am EST
Show more news