LockBit breach exposes 60,000 Bitcoin addresses, offers bounty for hacker’s identity

By: cryptosheadlines|2025/05/08 22:30:02

Airdrop Is Live CaryptosHeadlines Media Has Launched Its Native Token CHT. Airdrop Is Live For Everyone, Claim Instant 5000 CHT Tokens Worth Of $50 USDT. Join the Airdrop at the official website, CryptosHeadlinesToken.com LockBit, one of the most well-known Ransomware-as-a-Service (RaaS) groups, suffered a serious security breach that exposed around 60,000 Bitcoin addresses.On May 8, blockchain security firm SlowMist reported that hackers exploited a PHP 0-day or 1-day vulnerability to gain unauthorized access to LockBit’s backend systems and admin console.SlowMist pointed out that the hack resulted in the leak of a compressed file containing sensitive data. Other exposed information from the breach includes private keys, internal chat records, and details of affiliated entities. The hackers left a message on the website saying,“Don’t do crime CRIME IS BAD crime is bad xoxo from Prague.”LockBit, in a message with threat researcher Rey, said that only wallet addresses and chat logs were published from the attack. The platform insisted that no decryptors or source code were stolen from the breach.Meanwhile, SlowMist, using its Mistrack system, traced one of LockBit’s Bitcoin wallet addresses.The firm reported that the transaction trail appeared clear and led directly to known crypto exchanges. This suggests the attacker may have already attempted to cash out or launder the stolen funds.LockBit offers bountyLockBit has reportedly clarified that only a lightweight management panel had been breached. It emphasized that core tools like the locker builder, decryptors, and source code remained secure.Despite this claim, the breach marks a significant blow to its criminal credibility among affiliates and clients.In a surprising twist, LockBit offered a bounty for information on the hacker. The group claims the attacker may be someone called “xoxo” based in Prague.The platform stated:“If you can provide accurate and reliable information about this person’s identity — I’m willing to pay for it.”This bounty offer comes with a hint of irony, as LockBit is a target of a US government bounty program.The US authorities accuse the group of executing over 2,500 ransomware attacks in more than 120 countries. Nearly 1,800 of those victims were reportedly based in the United States.The Department of Justice claims the LockBit group extorted more than $500 million in ransom payments, with total losses, factoring in recovery and downtime, reaching into the billions.Latest Alpha Market ReportSource link

The privacy-focused crypto wallet Mixin announced today the launch of its U-based perpetual contract (a derivative priced in USDT). Unlike traditional exchanges, Mixin has taken a new approach by "liberating" derivative trading from isolated matching engines and embedding it into the instant messaging environment.

Users can directly open positions within the app with leverage of up to 200x, while sharing positions, discussing strategies, and copy trading within private communities. Trading, social interaction, and asset management are integrated into the same interface.

Simplified Trading Experience: No KYC Required, Opening a Position in Five Steps

Based on its non-custodial architecture, Mixin has eliminated friction from the traditional onboarding process, allowing users to participate in perpetual contract trading without identity verification.

The trading process has been streamlined into five steps:

· Choose the trading asset

· Select long or short

· Input position size and leverage

· Confirm order details

· Confirm and open the position

The interface provides real-time visualization of price, position, and profit and loss (PnL), allowing users to complete trades without switching between multiple modules.

Social-Native Trading: Strategy and Execution Completed in the Same Context

Mixin has directly integrated social features into the derivative trading environment. Users can create private trading communities and interact around real-time positions:

· End-to-end encrypted private groups supporting up to 1024 members

· End-to-end encrypted voice communication

· One-click position sharing

· One-click trade copying

On the execution side, Mixin aggregates liquidity from multiple sources and accesses decentralized protocol and external market liquidity through a unified trading interface.

By combining social interaction with trade execution, Mixin enables users to collaborate, share, and execute trading strategies instantly within the same environment.

Referral Mechanism: Non-institutional users can receive up to 60% fee split

Mixin has also introduced a referral incentive system based on trading behavior:

· Users can join with an invite code

· Up to 60% of trading fees as referral rewards

· Incentive mechanism designed for long-term, sustainable earnings

This model aims to drive user-driven network expansion and organic growth.

Self-Custody Architecture and Built-in Privacy Mechanism

Mixin's derivative transactions are built on top of its existing self-custody wallet infrastructure, with core features including:

· Separation of transaction account and asset storage

· User full control over assets

· Platform does not custody user funds

· Built-in privacy mechanisms to reduce data exposure

The system aims to strike a balance between transaction efficiency, asset security, and privacy protection.

A New Path for On-Chain Derivatives

Against the background of perpetual contracts becoming a mainstream trading tool, Mixin is exploring a different development direction by lowering barriers, enhancing social and privacy attributes.

The platform does not only view transactions as execution actions but positions them as a networked activity: transactions have social attributes, strategies can be shared, and relationships between individuals also become part of the financial system.

Regulatory Background

Mixin's design is based on a user-initiated, user-controlled model. The platform neither custodies assets nor executes transactions on behalf of users.

This model aligns with a statement issued by the U.S. Securities and Exchange Commission (SEC) on April 13, 2026, titled "Staff Statement on Whether Partial User Interface Used in Preparing Cryptocurrency Securities Transactions May Require Broker-Dealer Registration."

The statement indicates that, under the premise where transactions are entirely initiated and controlled by users, non-custodial service providers that offer neutral interfaces may not need to register as broker-dealers or exchanges.

About Mixin

Mixin is a decentralized, self-custodial privacy wallet designed to provide secure and efficient digital asset management services.

Its core capabilities include:

· Aggregation: integrating multi-chain assets and routing between different transaction paths to simplify user operations

· High liquidity access: connecting to various liquidity sources, including decentralized protocols and external markets

· Decentralization: achieving full user control over assets without relying on custodial intermediaries

· Privacy protection: safeguarding assets and data through MPC, CryptoNote, and end-to-end encrypted communication

Mixin has been in operation for over 8 years, supporting over 40 blockchains and more than 10,000 assets, with a global user base exceeding 10 million and an on-chain self-custodied asset scale of over $1 billion.

$600 million stolen in 20 days, ushering in the era of AI hackers in the crypto world

Ethereum's biggest enemy is actually AI hackers

Vitalik's 2026 Hong Kong Web3 Summit Speech: Ethereum's Ultimate Vision as the "World Computer" and Future Roadmap

Ethereum's Two Core Tenets: A "World Computer" + Global Broadcast Channel.

On the same day Aave introduced rsETH, why did Spark decide to exit?

The results of two decision-making philosophies have now been quantified

Full Post-Mortem of the KelpDAO Incident: Why Did Aave, Which Was Not Compromised, End Up in Crisis Situation?

Bad Debt, Liquidity Crisis, and DeFi Risk Reassessment

After a $290 million DeFi liquidation, is the security promise still there?

Replacing intermediary credit with code does not automatically equate to greater security

ZachXBT's post ignites RAVE nearing zero, what is the truth behind the insider control?

Perhaps what the cryptocurrency market truly needs is to transform what ZachXBT has done into institutional arrangements: stricter listing review standards, more transparent token distribution information disclosure, and more binding continuous monitoring mechanisms for exchanges.

Vitalik 2026 Hong Kong Web3 Carnival Speech Transcript: We do not compete on speed; security and decentralization are the core

Vitalik Buterin reveals the ultimate vision of Ethereum as a "world computer," announcing a hardcore roadmap for the next five years focusing on scalability, zkEVM, and quantum resistance.

In-depth Analysis of RAVE Events: Short Squeeze, Crash, and Quantitative Financial Models of Liquidity Manipulation

Behind the $RAVE tragedy: a hardcore breakdown of the quantitative model of the short squeeze and chain liquidation by the market makers, revealing how retail investors gradually become the fuel for precise harvesting.

Eve of Ceasefire, US Military Fires on Iranian Vessel | Rewire News Morning Brief

The market's reaction is faster than the statement

Figma's stock price drops over 7%, will Claude Design be the terminator?

From selling a model to building a product, Anthropic has taken this step faster than anyone expected.

Plunge by 10% Followed by Rebound, Weekend Oil Market Watch

The previous week's market-wide optimism will be punished.

SpaceX Mascot ASTEROID Fast Track $170 million, Stemming from an Unfinished Space Dream

Liv's life forever remains at the age of 15, and the Asteroid she designed has been officially recognized by Musk as the SpaceX mascot.

Why can this institution still grow by 150% when the scale of leading crypto VCs has shrunk significantly?

The merger of the two major payment companies, Bridge and BVNK, establishes their industry position and revenue scale.

Anthropic's $1 trillion, compared to DeepSeek's $100 billion

The capital market has no faith, it only believes in the profit and loss statement.

Geopolitical Risk Persists, Is Bitcoin Becoming a Key Barometer?

Liquidity Still Unleashed, Which Force Will Dictate Pricing

Annualized 11.5%, Wall Street Buzzing: Is MicroStrategy's STRC Bitcoin's Savior or Destroyer?

25M Transaction Volume, 17,204 BTC

An Obscure Open Source AI Tool Alerted on Kelp DAO's $292 million Bug 12 Days Ago

AI Agent could potentially become an additional security layer for DeFi investors.

Mixin has launched USTD-margined perpetual contracts, bringing derivative trading into the chat scene.