On-chain detective ZachXBT discovered a group of scammers trying to attract new victims through the DeFi-Leaper Finance liquidity protocol in the Blast L2 network.
According to the analysis, the attackers were behind several rug pull projects, including Magnate ($6.4 million), Kokomo ($4 million), Solfire ($4.8 million) and Lendora.
"They falsified KYC documents and used low-level audit firms. Now they have launched a scam on Base, Solana, Scroll, Optimism, Arbitrum, Ethereum, Avalanche and so on, " said ZachXBT.
It is assumed that the group is also responsible for fraud on Hash DAO, Glori Finance and ZebraDAO. Losses from the group's operations are estimated at more than $20 million.
As part of the latest scam, they funded a Leaper Finance address on the Blast network, using almost $1 million received and laundered in previous incidents, which added additional liquidity to lure victims.
After the investigation was published, the Leaper Finance account responded to ZachXBT.
"Good job! My comrades from the [North Korean hacker group] Lazarus Group are afraid, but they admire you, " the message reads.
In the same post, the protocol announced the launch of the token. However, the Leaper Finance website and accounts were later deactivated.
According to the analysis, the attackers were behind several rug pull projects, including Magnate ($6.4 million), Kokomo ($4 million), Solfire ($4.8 million) and Lendora.
"They falsified KYC documents and used low-level audit firms. Now they have launched a scam on Base, Solana, Scroll, Optimism, Arbitrum, Ethereum, Avalanche and so on, " said ZachXBT.
It is assumed that the group is also responsible for fraud on Hash DAO, Glori Finance and ZebraDAO. Losses from the group's operations are estimated at more than $20 million.
As part of the latest scam, they funded a Leaper Finance address on the Blast network, using almost $1 million received and laundered in previous incidents, which added additional liquidity to lure victims.
After the investigation was published, the Leaper Finance account responded to ZachXBT.
"Good job! My comrades from the [North Korean hacker group] Lazarus Group are afraid, but they admire you, " the message reads.
In the same post, the protocol announced the launch of the token. However, the Leaper Finance website and accounts were later deactivated.
