We found that the virtual currency "NEM" that flowed out from the virtual currency exchange "Coincheck" flowed in a large amount into another virtual currency exchange "Zaif" in Japan.
The total amount that flowed into Zaif by March 4 is about 22.6 million XEM (about 800 million yen at the rate of the 4th night) or more. There is a possibility that Zaif is used for washing funds of the stolen NEM.
526.3 million XEM (equivalent to about 58 billion yen at that rate) from "Coincheck" leaked on January 26. After that, the perpetrator seems to have tried washing money via "$ DASH", and it seems that the site which sells stolen NEM was launched on the dark web, and NEM's buying and selling is actively carried out on this site We are.
According to an engineer analyzing the block chain of NEM and tracking outflow NEM, multiple people who purchased NEM at the selling site of the dark web) go through the virtual currency payment platform "CoinPayments" and a plurality of such as Zaif It is said that you are depositing NEM to the virtual currency exchange of.
The deposit to Zaif continued from February 22, and it is said that about 22.6 million XEM (about 800 million yen) or more flows in by March 4. "As inflows continue, there is the possibility that the exchange of XEM to other currencies remitted to Zaif is going well," the engineer points out. The address sent to Zaif from the dark web is divided into two, but it sees "it will be by two groups".
Only Zaif confirmed payment at Japanese exchanges. Although there are payments to overseas exchanges such as Bittrex (US) and Poloniex (same), the deposit amount to Zaif is noticeably high.
A mark called "mosaic" attached by the NEM Foundation is given to the address handling the NEM flowing out of the coin check. Many of the major virtual currency exchanges refuse to deposit NEMs from mosaiced addresses indicating outflow NEMs from coin checks upon request from the NEM Foundation. Zaif also seems to be doing this correspondence, why is payment continuing?
According to this engineer, it says that once the money leaked NEM purchased from the culprit on the dark web is remitted to CoinPayments and deposited from the CoinPayments to the exchange, he is pretending to be remitting from a mosaic-free address.
Some overseas exchanges that had accepted NEMs purchased from the culprits on the dark web said they had stopped depositing NEM. "Zaif should also deny deposits currently flowing in from CoinPayments as well as deposits from mosaiced addresses so that transactions such as exchange to other currencies can not be done," the engineer pointed out There.