Police shut down dark web crypto laundering service linked to FTX hack

An international coalition of law enforcement agencies announced on Wednesday that it had taken down the popular dark web crypto laundering service ChipMixer, seizing more than $46 million in crypto and terabytes of server data.

The service, for example, was used last year by the attacker who stole funds from the now failed crypto exchange FTX, as well as by several ransomware groups.

“The platform and the criminal content have been seized,” ChipMixer’s website now reads.

“The ChipMixer software blocked the blockchain trail of the funds, making it attractive for cybercriminals looking to launder illegal proceeds from criminal activities such as drug trafficking, weapons trafficking, ransomware attacks, and payment card fraud,” Europol wrote in a press release. “Deposited funds would be turned into ‘chips’ (small tokens with equivalent value), which were then mixed together – thereby anonymizing all trails to where the initial funds originated.”

ChipMixer launched in mid-2017 and, according to Europol, it was allegedly used to facilitate the laundering of 152,000 Bitcoins, worth almost $2.5 billion.

The service was popular with hackers, as it was used by ransomware groups such as LockBit, Mamba, and SunCrypt, according to Europol.

The operation was coordinated by Europol working with Belgium’s Federal Police; Germany’s Federal Criminal Police Office, and General Prosecutors Office Frankfurt-Main; Poland’s Central Cybercrime Bureau; Switzerland’s Cantonal Police of Zurich; and in the U.S. the Federal Bureau of Investigation and ICE Homeland Security Investigations.

---

Do you have more information about crypto hacks or crypto mixing services? We’d love to hear from you. From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Wickr, Telegram and Wire @lorenzofb, or email [email protected]. You can also contact TechCrunch via SecureDrop.