Crypto mixer Blender has been rebranded to Sinbad, says Elliptic

Published at: Feb. 13, 2023

Blender, the cryptocurrency mixer sanctioned by the United States Department of the Treasury’s Office of Foreign Assets Control in May 2022, was “highly likely” relaunched as Sinbad, according to risk management firm Elliptic.

In a Feb. 13 report, Elliptic said its analysis of Sinbad suggested that the crypto mixer was likely a rebrand of Blender as well as having “the same individual or group responsible for it.” According to the firm, Sinbad was behind laundering roughly $100 million in Bitcoin (BTC) for North Korea’s hacking group Lazarus.

Elliptic said following U.S. authorities cracking down on crypto mixers — as OFAC did with Tornado Cash in August and Blender in May — Lazarus hackers used Sinbad to launder some of the funds from the $100-million attack on Horizon Bridge in January. Blockchain analysis of wallets tied to a suspected Blender operator also showed $22 million in crypto going to Sinbad and other funds sent to individuals who promoted the mixer.

“The on-chain pattern of behavior is very similar for both mixers, including the specific characteristics of transactions, and the use of other services to obfuscate their transactions,” said Elliptic. “The way in which the Sinbad mixer operates is identical to Blender in several ways, including ten-digit mixer codes, guarantee letters signed by the service address, and a maximum seven-day transaction delay.”

Elliptic speculated that the individuals behind Sinbad may have rebranded to “gain trust from users” following Blender shutting down, adding that OFAC could consider ordering sanctions on the crypto mixer. The U.S. Treasury Department is already facing lawsuits for its sanctions on Tornado Cash.

Related: Into the storm: The murky world of cryptocurrency mixers

Lazarus has allegedly been responsible for several major attacks in the crypto space, including a $620-million hack of Axie Infinity's Ronin Bridge in March 2022. South Korea’s government has also imposed its own sanctions against North Korean entities tied to the theft of cryptocurrency.

Tags
Related Posts
Uncovering the Motives Behind North Korea’s Crypto Conference
On Jan. 15, the United Nations warned that attending North Korea’s cryptocurrency conference in February will likely constitute a sanctions violation. According to Reuters, this notice was issued in a confidential report that will be submitted to the U.N. Security Council later this month. The warning comes after a series of events sparked suspicion around North Korea’s growing interest in blockchain and cryptocurrency. In August, a panel monitoring the enforcement of U.N. sanctions reported that North Korean agents have generated about $2 billion by stealing money from financial institutions and cryptocurrency exchanges. The leaked report notes that North Korea is …
Altcoin / Jan. 17, 2020
The Taliban will never understand crypto, according to founder of LEARN Afghanistan
Pashtana Durrani, the founder of an organization working to make education available to women and girls across Afghanistan as the country remains under Taliban rule, said the Islamic fundamentalist group has poor financial literacy, especially when it comes to crypto. In a Wednesday interview with political commentator Tommy Vietor from Pod Save the World, LEARN Afghanistan founder Pashtana Durrani said the international community — particularly the United States — should consider removing the sanctions imposed on Afghanistan and unfreezing funds controlled by foreign governments. According to Durrani, limiting foreign aid to Afghanistan through nongovernmental organizations (NGOs) and other entities gives …
Business / Dec. 2, 2021
Russians banned from accessing Bitmex within European Union
Major cryptocurrency exchange BitMEX is working to increase compliance with the European sanctions against Russia by preparing to enforce major restrictions for its Russian users. BitMEX is changing its restricted jurisdictions policy to be compliant with various restrictive measures of the European Union, Cointelegraph has learned. The BitMEX crypto exchange notified a group of potentially affected users about the upcoming changes via email on Monday. According to an email seen by Cointelegraph, Russian citizens or residents will no longer be able to access BitMEX services from the European Union after July 11, 2022. That means that such users will not …
Bitcoin / July 5, 2022
‘Nobody is holding them back’ — North Korean cyber-attack threat rises
North Korea-backed cyberattacks on cryptocurrency and tech firms will only become more sophisticated over time as the country battles prolonged economic sanctions and resource shortages. Former CIA analyst Soo Kim told CNN on Sunday that the process of generating overseas crypto income for the regime has now become a “way of life” for the North Koreans: “In light of the challenges that the regime is facing — food shortages, fewer countries willing to engage with North Korea [...] this is just going to be something that they will continue to use because nobody is holding them back, essentially.” She also …
Blockchain / July 12, 2022
Binance still serving Russians while seeking clarity on EU crypto sanctions
In the weeks following new sanctions from the European Union, Binance has kept its doors open for non-sanctioned Russian nationals, but that does not mean that the firm isn't complying with EU sanctions, according to Binance’s newly-appointed sanctions executive. Western sanctions against Russia have been a major challenge for Binance from day one, and the firm has been working hard to comply, Binance’s global head of sanctions Chagri Poyraz told Cointelegraph in an interview. Since the start of Russia's invasion of Ukraine, Binance has comprehensively blocked several non-government-controlled territories of Ukraine, including annexed regions like Donetsk and Luhansk, Poyraz said. …
Regulation / Oct. 28, 2022