Elliptic's research attributes the attack to North Korea-linked actors, consistent with the pattern of large state-linked exchange thefts. Refer to the post for the specific findings.

Elliptic's post analyses an exploit of Drift Protocol, reported at around 286 million dollars and suspected to be linked to North Korea (DPRK).

North Korea-linked groups are among the most prolific crypto thieves, and exposure to their stolen funds carries serious sanctions and AML risk.

It is the use of AI by criminals to scale activity such as scams, deepfakes and social engineering targeting crypto users and services.

Every false positive costs analyst time and can erode trust in the tooling. Strong providers can explain how they measure accuracy and keep high-confidence labels reliable.

Funds move across chains, so a provider that only covers a few networks leaves blind spots. Coverage breadth and bridge tracing are key differentiators.

A provider may list many chains but cover few assets or lack cross-chain tracing, leaving gaps. Depth of coverage matters as much as breadth.

Ask which assets are covered per chain, how bridges and DEXs are handled, and how quickly new chains and tokens are added.

They are investigations that follow funds across multiple blockchains and assets when an alert is escalated. Elliptic lets analysts visualise complex crypto transactions with a single click, automatically connecting wallet activity across chains to find the source or destination of funds.

By automatically plotting cross-chain activity and tracing through bridges, decentralised exchanges and multi-hop transactions, Elliptic removes the manual work of matching transactions across block explorers, turning work that took days into minutes.

Typically when a screen or monitoring alert escalates and needs deeper context, for example to trace a customer's source of wealth or confirm exposure to a sanctioned entity before filing a report or taking action on an account.

Elliptic captures activity in an auditable way and supports case summaries and reporting, which helps teams evidence decisions to regulators, auditors and, where relevant, law enforcement.

Elliptic launched a consultation across the industry to develop best practices for preventing AI-enabled crypto crime, bringing stakeholders together on shared standards.

Lens unifies wallet screening and transaction monitoring into one workflow, taking analysts from alert to decision in a single workspace with risk data, behavioural indicators and AI-powered insights.

It replaces fragmented, manual investigation steps with one workflow, reducing handoffs and time spent moving between tools.

Elliptic reports faster alert resolution and full auditability, helping teams make evidence-based decisions at scale.

Movement through committee signals momentum toward a clearer US market structure framework, which affects how crypto firms are regulated and supervised.

Track the bill's scope and likely obligations so compliance programmes can prepare, while noting that the detail can change as it moves through the legislative process.

The GENIUS Act is US legislation establishing a federal framework for payment stablecoins, including requirements for permitted stablecoin issuers. Elliptic's post covers its passage in the Senate.

It primarily affects stablecoin issuers and the banks and firms that handle stablecoins, by setting standards for which stablecoins are permitted under federal law.

They can carry value linked to sanctioned Russian actors, so a firm can become exposed without transacting with a sanctioned party directly. Detecting that link requires tracing exposure across hops.

Elliptic assesses how closely a wallet or transaction is connected to sanctioned entities across multiple hops and chains, so teams can configure rules that account for indirect as well as direct exposure.

Elliptic's research indicates Iran-linked actors have acquired US dollar stablecoins worth at least half a billion dollars, showing how sanctioned actors can use stablecoins to access dollar value.

Through blockchain analytics that attribute activity to sanctioned-linked actors and assess direct and indirect exposure across chains.

Under the GENIUS Act, every stablecoin a bank touches will be either permitted under federal law or not, and treating a non-permitted stablecoin as permitted would be a compliance failure.

Banks need to identify which stablecoins are permitted, screen for exposure to non-permitted ones, and build controls that reflect the new framework.

Elliptic can identify stablecoin activity and exposure across chains and supports issuer due diligence, helping banks apply the right treatment to each stablecoin.

Licensed issuers must meet AML, sanctions and risk requirements, which is where issuer due diligence and monitoring apply.