The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has issued its first-ever sanctions on a crypto mixer. The mixing service was used by Lazarus Group to process illicit proceeds from the $620 million crypto heist of the online game Axie Infinity, said the Treasury Department.
Treasury Department Sanctions Crypto Mixer
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced Friday that it has sanctioned crypto mixer Blender.io (Blender). According to the OFAC, this mixing service is used by the Democratic People’s Republic of Korea (DPRK) “to support its malicious cyber activities and money-laundering of stolen virtual currency.”
The announcement explains that on March 23, Lazarus Group, a DPRK state-sponsored cyber hacking group, carried out the largest cryptocurrency heist to date, worth almost $620 million, of a blockchain project linked to the online game Axie Infinity. The OFAC added:
Blender was used in processing over $20.5 million of the illicit proceeds.
The OFAC sanctioned the Lazarus Group on Sept. 13, 2019, and “identified it as an agency, instrumentality, or controlled entity of the government of the DPRK,” the announcement adds. The designation is based on the group’s “relationship to the U.S.- and UN-designated Reconnaissance General Bureau, the DPRK’s premiere intelligence organization.”
Under Secretary of the Treasury for Terrorism and Financial Intelligence Brian E. Nelson commented:
Today, for the first time ever, Treasury is sanctioning a virtual currency mixer.
The investigation by the OFAC also found that Blender facilitated money laundering for Russian-linked malign ransomware groups including Trickbot, Conti, Ryuk, Sodinokibi, and Gandcrab.
The U.S. Treasury Department clarified:
While most virtual currency activity is licit, it can be used for illicit activity, including sanctions evasion, through mixers, peer-to-peer exchangers, darknet markets, and exchanges.
“This includes the facilitation of heists, ransomware schemes, and other cybercrimes,” the Treasury noted.
The announcement details that as a result of the sanctions, all property and interests in property of Blender.io, in the U.S. or in the possession or control of U.S. persons, are blocked and must be reported to the OFAC. Moreover, any entities that are 50% owned or more by one or more blocked persons are also blocked, and all transactions by U.S. persons or within the U.S. involving designated or blocked persons are prohibited.