Atomic Wallet
Summary
Atomic Wallet is a non-custodial, multi-currency cryptocurrency wallet founded in 2017 and headquartered in Tallinn, Estonia. In June 2023, attackers attributed to North Korea's Lazarus Group (TraderTraitor) stole approximately $100 million in cryptocurrency from an estimated 5,500 user wallets in one of the largest crypto theft events of that year. Prior to the hack, an independent security firm had publicly disclosed unresolved critical vulnerabilities in the wallet's cryptography implementation as early as February 2022, and Atomic Wallet did not adequately address those findings before the breach occurred.
Connected Entities
1 entities- + 5 more
Timeline(12 events)
2021-04-01
Least Authority delivers security audit to Atomic Wallet identifying critical vulnerabilities, including cryptography flaws capable of causing total user fund loss.
2021-11-01
Atomic Wallet provides partial updates; Least Authority finds a significant number of issues remain unresolved.
2022-02-10
Least Authority publicly discloses unresolved Atomic Wallet security risks — the first such disclosure in the firm's 11-year history — after responsible disclosure attempts go unaddressed.
2023-06-02
Hack begins: DPRK TraderTraitor-affiliated actors (Lazarus Group) begin draining Atomic Wallet user wallets. An estimated 5,500 wallets are ultimately compromised.
2023-06-03
Atomic Wallet publicly acknowledges the security incident via its official blog, stating it is investigating. No root cause is disclosed.
2023-06-06
Elliptic publicly attributes the Atomic Wallet hack to North Korea's Lazarus Group and begins tracing stolen funds on-chain.
2023-06-13
Total losses confirmed to exceed $100 million by blockchain analytics firms, making it one of the largest crypto hacks of 2023.
2023-06-01
Elliptic reports hackers routing stolen funds through OFAC-sanctioned Russian exchange Garantex and then through Sinbad.io mixer to obfuscate trails.
2023-08-23
FBI issues press release identifying DPRK TraderTraitor actors as responsible for the $100 million Atomic Wallet theft, as well as simultaneous heists against Alphapo and CoinsPaid.
2023-09-01
Class action lawsuit Meany et al. v. Atomic Wallet filed in U.S. District Court for the District of Colorado (case 1:23-cv-01582).
2024-09-10
U.S. District Judge Philip Brimmer dismisses the Colorado class action for lack of personal jurisdiction. Motion to amend also denied.
2025-06-05
A new proposed class action, Petru Alasu et al. v. Atomic Protocol Systems dba Atomic Wallet, filed in the U.S. District Court for the Northern District of California, continuing legal pressure on the company.
Decision Log
- hash: 3qjuGNacbP91G6QFF4PTcxHUXTsdwqq79deKVHm7EGUb
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:41 AM
last updated: 5/30/2026, 7:10:10 PM
avoid.net — verified advice for a post-truth world