A certain hacker team in China exposed internal conflicts, claiming to have stolen approximately 7 million dollars worth of cryptocurrency assets

According to market news, a hacker group in China has experienced internal strife due to disputes over the distribution of stolen goods. Members publicly revealed that they had stolen approximately $7 million in cryptocurrency assets through supply chain attacks, targeting platforms such as the cryptocurrency wallet Trust Wallet.

According to the leaked information, the group operated under the name of the cybersecurity company Wuhan Anshun Technology, publicly engaging in activities such as vulnerability mining, cyber offense and defense, and security services, while internally actually involved in activities related to the theft of cryptocurrency assets and other gray market activities. Team members claimed they obtained mnemonic phrases in bulk and scanned multi-chain assets, including networks like Ethereum, BNB Chain, and Arbitrum, through supply chain vulnerabilities in the Electron client, plugin reverse engineering, and automation tools.

The whistleblower stated that the team had developed automated tools to scan mnemonic phrase assets in bulk and used remote control programs to steal wallet data, subsequently transferring and splitting the funds. The related attacks reportedly involved 37 types of tokens across multiple blockchain networks. The trigger for the exposure of this incident was an internal dispute over the distribution of stolen goods.

The whistleblower claimed that they had conflicts with the team leader over unfair profit distribution and publicly disclosed relevant evidence after their severance compensation was not fulfilled, planning to turn themselves in to law enforcement. Currently, the related accusations have not been officially confirmed, and the details of the incident are still under further investigation. Industry insiders pointed out that this incident once again highlights the security risks of cryptocurrency wallet supply chains and plugins, as well as the trend of targeted attacks against high-value users.