On September 24, 2025 roughly $21M in BTC, ETH, LTC, DOGE and BCH flowed out of hot wallets belonging to SBI Crypto (Japanese SBI Group's mining pool) through five instant exchangers and into Tornado Cash. ZachXBT and Cyvers linked the laundering pattern to DPRK-affiliated actors; SBI Group never publicly confirmed the incident.

According to on-chain investigator ZachXBT, Japan’s financial giant SBI Group may have experienced a security breach involving its cryptocurrency mining subsidiary, SBI Crypto. Wallet addresses associated with the company reportedly saw approximately USD 21 million in suspicious outflows on September 24. The stolen funds included multiple cryptocurrencies such as Bitcoin (BTC), Ethereum (ETH), Litecoin (LTC), Dogecoin (DOGE), and Bitcoin Cash (BCH). The attacker transferred the funds through five instant exchange platforms before ultimately depositing them into the Tornado Cash mixing protocol.