Some updates over the weekend:
https://blog.trailofbits.com/2025/0...of-operational-security-failures-has-arrived/
Compromising the signing infrastructure is one of the worst things that can happen to a company. The fact that all signs point to basic security failures says a lot about the management. If they can’t get the fundamentals right, they’re a risk to the organization. I’ve flagged this kind of thing to risk committees before as a classic insider threat. Fraud like this usually comes down to a mix of opportunity and the belief that they can actually pull it off.
Saying the funds can’t be laundered is wishful thinking. Sure, AI-powered tracking makes it harder, but there are still plenty of ways to
cash out. Slow, structured withdrawals, OTC deals, or working with state-sponsored actors (hint, hint) and darknet liquidity pools. A well-connected person can move large amounts over time, even if they take a haircut on the value.
And if management ignored basic security controls, it’s not a stretch to think they also lacked internal oversight. That kind of setup is exactly how insider fraud happens, making an inside job more than just possible, it’s actually pretty likely.