Connect with us
DAPA Banner

Crypto World

Bitrefill Links Lazarus Group to Employee Laptop Hack, Stolen Funds

Published

on

Crypto Breaking News

Bitrefill, a crypto-enabled e-commerce platform that lets customers spend digital assets on real-world products and gift cards, disclosed a cybersecurity incident that occurred on March 1. The breach enabled attackers to compromise an employee’s laptop by deploying malware and reusing existing IP and email infrastructure, which in turn granted access to hot wallets and the ability to drain funds. In addition to financial losses, Bitrefill confirmed that information tied to about 18,500 purchases was exposed, potentially revealing limited customer data. Crucially, the company said there is no evidence that the attackers extracted the entire database, suggesting the objective was financial rather than data exfiltration on a wholesale scale. Investigators have pointed to BlueNoroff Group, a North Korean hacking outfit with close ties to the Lazarus Group, as a possible participant or sole attacker in the incident.

Key takeaways

  • The breach occurred on March 1 and targeted an employee’s laptop via malware, with attackers leveraging reused IP and email infrastructure to gain a foothold.
  • Attackers deployed on-chain tracing techniques and accessed Bitrefill’s hot wallets to drain funds, while attempting to map accessible assets.
  • Data exposure affected roughly 18,500 purchase records, but Bitrefill asserts that the full customer database was not accessed and that only limited customer information may have been disclosed.
  • There is attribution to North Korea-linked groups, notably BlueNoroff Group with ties to Lazarus Group, as potential participants or sole operators behind the attack.
  • Bitrefill halted systems to contain the breach, engaged law enforcement, and collaborated with multiple security firms to strengthen defenses and detection capabilities.
  • Operations have largely returned to normal, with Bitrefill reporting that payments, inventory, and customer services are functioning, accompanied by ongoing security enhancements.

Tickers mentioned:

Sentiment: Neutral

Market context: The incident sits within a broader pattern of persistent cybersecurity threats facing crypto platforms, underscored by well-funded actors like Lazarus Group and its affiliated outfits. Lazarus remains associated with some of the most high-profile intrusions in the sector, including a noted $1.4 billion breach on a major exchange in February 2025, which has shaped industry risk perceptions and driven heightened security investments across the ecosystem.

Why it matters

The Bitrefill incident underscores how even firms built around rapid, on-demand crypto services must maintain rigorous operational security and incident response protocols. The attack vector—malware, credential reuse, and compromised hardware—highlights the need for layered defenses that extend beyond perimeter protections to include robust endpoint monitoring, strict access controls, and rapid containment measures. In the wake of the breach, Bitrefill not only contained the immediate risk by taking systems offline but also engaged external security partners to conduct comprehensive reviews and implement enhancements. This approach aligns with a broader industry trend: attackers are increasingly adept at blending traditional cyber techniques with on-chain reconnaissance to maximize impact, even on businesses that otherwise operate with strong security postures.

Advertisement

The incident also illustrates the tension between preserving customer trust and absorbing losses when underwrite costs fall to operational budgets. Bitrefill indicated that it would absorb the losses from its working capital, a decision that could reverberate through risk management discussions in the sector. For users, the event reinforces the importance of monitoring transaction activity, staying alert for unusual account behavior, and understanding that security incidents can surface even when providers are actively investing in defense. For operators and builders, it emphasizes the value of proactive third-party security audits, ongoing staff training, and the adoption of least-privilege access models to limit the blast radius of any future breach.

From a regulatory and policy standpoint, the disclosure and coordinated response with law enforcement signal ongoing collaboration between private firms and public authorities in addressing cross-border cyber threats. The Lazarus-linked threat landscape has long compelled exchanges and wallets to prioritize threat intel sharing, user notification protocols, and rapid incident communications to minimize damage and preserve market integrity. While Bitrefill’s experience is not unique, it contributes to a growing corpus of case studies that underscore the need for transparent post-incident reporting and verifiable security hardening measures in real time.

What to watch next

  • Bitrefill’s ongoing security reviews and any published audit findings from the partnering firms (Security Alliance, FearsOff Security, Recoveris.io, and zeroShadow).
  • Updates on how the company enhances internal access controls and monitoring capabilities to reduce the likelihood of a recurrence.
  • Law enforcement disclosures or official statements that could shed further light on the attribution and motive behind the attack.
  • Any public posts or supplementary communications from Bitrefill clarifying the status of customer data exposure and steps available to users who may have concerns.
  • Industry-wide responses to similar intrusions, including changes in security practices, incident response playbooks, and cross-organization threat intelligence sharing.

Sources & verification

  • Bitrefill’s official post on X detailing the breach, its scope, and immediate response
  • Statements naming BlueNoroff Group and Lazarus Group as potential actors and their relation to the Lazarus ecosystem
  • Public references to the security firms engaged in mitigating the incident: Security Alliance, FearsOff Security, Recoveris.io, zeroShadow
  • Bitrefill’s note that the breach did not appear to access the entire customer database and that the losses will be absorbed from operational capital

Bitrefill breach highlights security lessons for the crypto retail ecosystem

Bitrefill’s experience is a stark reminder that cyber threats targeting crypto-enabled businesses are multifaceted, blending classic malware and credential theft with blockchain-focused reconnaissance. The company’s rapid containment, coupled with its collaboration with multiple security specialists, demonstrates a practical model for incident response that others in the space can emulate. While the attackers’ apparent objective seems financial, the exposure of tens of thousands of purchase records—under a platform that bridges crypto wallets with everyday purchases—serves as a cautionary note about data leakage, privacy considerations, and the ongoing need for rigorous access governance.

In the broader crypto market, the incident dovetails with a continuing pattern where high-profile breaches test the limits of security controls and force operators to balance customer trust with practical risk management. The Bybit event cited in industry chatter underscores a particularly aggressive threat landscape, where attackers leverage sophisticated techniques and persistent campaigns. As platforms expand services, including gift cards and fiat-onramps, the imperative to secure the end-to-end user journey—from authentication to transaction settlement—becomes more pronounced. Bitrefill’s commitment to a thorough security upgrade, including external audits and tightened internal processes, aligns with a prudent standard for the sector in 2026 and beyond.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Bitcoin Adoption Metrics Say One Thing, Price Action Says Another

Published

on

Bitcoin Adoption Metrics Say One Thing, Price Action Says Another

Key takeaways

  • Bitcoin’s price reflects short-term marginal buying and selling, while adoption reflects long-term structural shifts. Ownership expansion, institutional integration and merchant growth can accelerate even when the market price remains flat or declines.

  • In 2025, Bitcoin expanded significantly across institutions, banks, corporations, merchants and sovereign entities. These shifts represent deeper entrenchment within global financial systems, even as headline price performance appeared underwhelming.

  • Institutions accumulated substantial amounts of Bitcoin, but much of this demand was offset by distribution from long-term holders. As supply changes hands between cohorts, price may consolidate instead of surge.

  • Merchant adoption and Lightning Network expansion improve Bitcoin’s real-world functionality. However, widespread instant conversion to fiat limits sustained net buying pressure unless merchants retain the Bitcoin they receive.

The contrast between Bitcoin’s (BTC) market price and its network adoption has never been more stark. While the price chart has spent much of the past year well below its peak, the underlying data reveals a different reality. In 2025, Bitcoin witnessed a massive, quiet expansion across banks, corporations and sovereign states.

This paradox exists because short-term marginal price formation is often driven by speculative noise, whereas structural adoption is driven by long-term institutional entrenchment. Bitcoin’s fundamentals are compounding at record speed even when the ticker remains stagnant.

This article explores why Bitcoin’s structural adoption across institutions, advisors, corporations and merchants has accelerated even as price action underperforms. It explains how ownership transfer, small allocation sizes and macro liquidity can delay adoption’s impact on short-term price movements.

Bitcoin adoption and price track fundamentally distinct phenomena

When people refer to Bitcoin adoption, they are typically describing gradual, long-term structural shifts:

Advertisement
  • Who is accumulating and holding Bitcoin?

  • Which companies or platforms are launching Bitcoin-related products and services?

  • Who is beginning to accept it as payment?

  • Which institutions, corporations or even governments are incorporating it into their balance sheets or reserves?

These underlying changes evolve slowly, building incrementally over many months or years.

Price, by contrast, is determined at the margin in real time. It responds primarily to:

  • Immediate buyers and sellers in the market

  • Current liquidity dynamics

  • Leverage, futures and derivatives positioning

  • Broader macroeconomic sentiment and risk appetite

  • Supply being released or withheld by long-term holders

Strong adoption can steadily broaden the ownership base without necessarily driving prices higher. It can even coincide with flat or declining prices if distribution from seasoned holders matches incoming demand from newcomers. Ownership can shift between cohorts without triggering sharp repricing.

Did you know? As of March 15, 2026, more than 20 million Bitcoin had been mined out of a maximum total supply of 21 million, representing more than 95% of all BTC that will ever exist. The final Bitcoin is not expected to be mined until around 2140.

Advertisement

How expansion dynamics seem to be unfolding

While Bitcoin’s price action had been relatively weak as of March 2, 2026, adoption trends continued to show strength:

Institutions are accumulating at scale

In 2025, institutions reportedly accumulated roughly 829,000 Bitcoin across businesses, governments, funds and exchange-traded funds (ETFs). This was not a marginal change but a meaningful shift in ownership structure.

Importantly, institutional exposure represents millions of underlying individuals gaining access through brokerage accounts, retirement plans, sovereign wealth funds and corporate balance sheets.

Much of this demand was absorbed by distribution from long-term holders and early adopters. When early whales sell into deeper liquidity, the price does not necessarily surge. Instead, supply shifts from one cohort to another.

Advertisement

Investment advisors have been net buyers for eight consecutive quarters 

Registered investment advisors (RIAs) oversee roughly $146 trillion in client assets globally. Since Bitcoin ETFs launched, RIAs have steadily allocated capital, reportedly around $1.5 billion per quarter, without a single net-selling quarter.

That consistency matters.

However, average allocations remain extremely small. Many advisors hold Bitcoin at just basis-point levels in diversified portfolios. Until allocations move from fractions of a percent toward 1% to 2% model weights, the price impact may remain gradual.

In other words, the pipeline is open, but the flow rate is still increasing.

Advertisement

Banks are once again developing Bitcoin-related products

A growing share of major US banks are actively developing Bitcoin custody, trading, advisory and related services. Improved regulatory clarity compared with previous years has reduced institutional reluctance and opened the door to broader participation.

This growing involvement from traditional banks marks a key step toward normalization. Bitcoin is evolving from a speculative, peripheral asset into one that is increasingly embedded within mainstream financial systems and infrastructure.

That said, building products is not the same as achieving widespread availability. Initial launches often target ultra-high-net-worth individuals, institutional clients or remain in limited pilot phases. Rolling out full retail access requires significant time, compliance and operational scaling.

Ultimately, this infrastructure serves as a foundational enabler of future adoption rather than an immediate trigger for rapid market shifts.

Corporate Bitcoin adoption and the weight it brings

Corporate accumulation of Bitcoin can influence the market in several ways:

Advertisement
  • It steadily removes Bitcoin from liquid, circulating supply.

  • It demonstrates high-conviction, treasury-level endorsement from established businesses.

  • It fosters peer benchmarking, encouraging more companies to follow suit.

However, a large portion of these purchases occurs over-the-counter (OTC) or through carefully structured, gradual accumulation programs designed to avoid disrupting spot markets. This measured approach means corporate buying often reshapes long-term ownership patterns far more than it drives short-term explosive price action.

In short, corporate buying may influence long-term ownership patterns more than short-term price action.

Did you know? Bitcoin mining now consumes less energy than many traditional industries, including gold mining and the global banking system, according to several comparative energy studies.

Surge in merchant adoption of Bitcoin

Merchant acceptance of Bitcoin expanded rapidly in 2025. In November 2025, the Bitcoin Lightning Network reached a record $1.17 billion in volume. This suggests that the network is no longer used only for experimental “coffee” payments, but has also become a layer for high-value institutional settlements.

Advertisement

For merchants, Bitcoin offers clear operational advantages, including:

  • Drastically lower processing fees compared with traditional card networks

  • Elimination or near-elimination of chargeback risk

  • Smoother, cheaper cross-border settlements

A large majority of merchants still opt for instant conversion of received Bitcoin payments into fiat currency through payment processors. As a result, incoming transaction volume does not reliably translate into sustained net buying pressure on Bitcoin itself.

Payments adoption meaningfully enhances Bitcoin’s real-world utility. However, utility alone does not generate lasting scarcity or upward price pressure unless merchants choose to hold the BTC they receive.

Bitcoin adoption by countries continues to grow

Throughout 2025, Bitcoin’s role as a strategic reserve asset expanded significantly as five more countries added it to their reserves. This wave of adoption spanned diverse regions and financial structures, including sovereign wealth funds in Saudi Arabia and Luxembourg, the Czech Republic’s central bank and direct acquisitions by Taiwan and Brazil.

Advertisement

Government involvement in Bitcoin adoption carries significance for several reasons. Countries operate on multidecade time horizons rather than quarterly earnings cycles. They typically adopt strategic, long-term holding policies rather than short-term trading. Adoption by sovereign entities confers powerful legitimacy on any asset class, signaling to markets, institutions and the public that Bitcoin is becoming part of mainstream financial frameworks.

Did you know? Lost Bitcoin is estimated to total several million coins, permanently reducing the effective circulating supply and increasing long-term scarcity.

Bitcoin’s volatility continues to decline

One of the most underappreciated indicators of maturing adoption is Bitcoin’s steadily declining volatility. Over the past decade, Bitcoin’s annualized volatility has fallen. Successive market cycles have produced progressively narrower percentage drawdowns and rallies compared with the extreme swings seen in earlier bull and bear phases.

This structural decline in volatility reflects several reinforcing developments:

Advertisement
  • Markedly deeper and more resilient market liquidity

  • More diversified distribution of ownership across holder cohorts

  • Growing institutional and professional participation

  • More sophisticated, liquid derivatives markets (futures, options and perpetuals) that help absorb shocks

Bitcoin’s volatility profile now increasingly resembles that of established asset classes such as stocks, commodities and foreign exchange. This aligns with the preferences of conservative capital allocators, including pension funds, endowments and risk-averse institutions.

Why hasn’t Bitcoin price reacted more aggressively?

While institutional and sovereign adoption increased in 2025, the market’s immediate price action remained muted. This quiet accumulation phase suggests that the true impact of large capital inflows was masked by macroeconomic headwinds.

  • Ownership transfer absorbs demand: When long-term Bitcoin holders distribute into institutional demand, the market can absorb large volumes without sharp upward price moves. Supply simply changes hands as adoption grows and price consolidates.

  • Adoption widens the base, not the margin: Marginal buyers and sellers play a key role in setting the price of cryptocurrencies. Structural adoption broadens the ownership base but does not always shift the aggressive marginal bid right away. Until fresh demand exceeds available supply, price can remain range-bound.

  • Allocation sizes remain small: Many institutions and advisors now allocate to Bitcoin, but at very modest weights. If that changes, marginal demand could increase.

  • Macro liquidity matters: Bitcoin exists within a broader macro environment. Factors shaping capital flows include liquidity conditions, interest rate expectations and global risk appetite. Greater Bitcoin adoption does not mean it is insulated from macro cycles.

Cointelegraph maintains full editorial independence. The selection, commissioning and publication of Features and Magazine content are not influenced by advertisers, partners or commercial relationships.

Source link

Advertisement
Continue Reading

Crypto World

Cango Posts $285M Q4 Loss on Costs, Impairments

Published

on

Cango Posts $285M Q4 Loss on Costs, Impairments

Bitcoin mining firm Cango Inc. reported a net loss of $285 million in the fourth quarter of 2025, as impairment charges, fair-value losses and higher mining costs outweighed revenue from its expanding Bitcoin mining business.

In its earnings report published Monday, Cango said fourth-quarter revenue reached $179.5 million, including $172.4 million from Bitcoin mining, while total operating costs and expenses rose to $456.0 million.

The losses were driven in part by an $81.4 million impairment on mining machines and a $171.4 million loss tied to changes in the fair value of Bitcoin (BTC)-collateralized receivables. The company also reported higher production costs, with all-in mining expenses rising to $106,251 per BTC in the quarter.

The results show how revenue growth from mining was offset by impairment charges, mark-to-market adjustments and higher production costs as the company scaled the business.

Advertisement
Cango’s six-month price chart. Source: Google Finance

Google Finance data shows that Cango’s shares fell from around $4.50 on Oct. 1 to about $1.50 by Dec. 31. At the time of writing, it trades at $0.68, marking a decline of more than 84% over the past six months.

Cango posted a net loss of $452.8 million for full-year 2025

For the full year, Cango reported total revenue of $688.1 million, including $675.5 million from Bitcoin mining. The company mined 6,594.6 Bitcoin in 2025, or about 18.07 Bitcoin per day, in its first full year operating at scale in the sector.

Cango reported total operating costs and expenses of $1.1 billion for 2025, including $338.3 million in impairment losses on mining machines and $96.5 million in fair-value losses on Bitcoin-collateralized receivables, highlighting the cost pressures associated with scaling its mining operations.

Related: Bitcoin miners saw the AI power crunch coming — and the nuclear revival

In total, Cango posted a net loss of $452.8 million for the year. Chief financial officer Michael Zhang said the loss was driven largely by non-recurring transformation costs and market-driven fair-value adjustments.

Advertisement

Cango’s Bitcoin mining pivot

Cango’s results come amid a broader strategic shift that has reshaped the company’s business over the past year.

In April 2025, Cango agreed to sell its legacy China auto financing operations for $352 million to Ursalpha Digital Limited, an entity linked to Bitmain.

The deal also included the transfer of 32 exahashes per second (EH/s) of mining capacity to the company, effectively repositioning Cango as a publicly traded Bitcoin mining firm.

In February, Cango raised $75.5 million in equity financing after selling 4,451 Bitcoin for about $305 million to reduce leverage.

Advertisement

The company said this supports its pivot toward artificial intelligence infrastructure, with plans to repurpose its mining operations into distributed compute capacity for AI workloads.

Magazine: All 21 million Bitcoin is at risk from quantum computers