DEF CON 33 - Where’s My Crypto, Dude? The Ultimate Guide to Crypto Money Laundering - Thomas Roccia
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 30:05
North Korean attackers stole $1.4 billion from Bybit exchange and laundered it within minutes through thousands of wallets, demonstrating sophisticated crypto money laundering techniques on public blockchain 1:06-1:19.
Key Takeaways:
• The breach occurred through a supply chain attack on Safe Wallet, where attackers injected malicious JavaScript code targeting Bybit specifically 5:54-7:30.
• Six key laundering techniques were used: immediate asset conversion, money dispersing, cross-chain bridges, no-KYC exchanges, mixers/coin join, and OTC cash-out 9:12-17:31.
• The speaker developed an AI agent using LLM and MCP protocol to track transactions, identify patterns, store data in graphs, and generate investigation reports 17:43-24:41.
• Key tracking challenges include massive data volumes, cross-chain complexity, resource limitations, and API costs 25:36-27:25.
North Korean attackers demonstrate advanced capabilities in both hacking crypto infrastructure and executing complex money laundering schemes, making AI-assisted investigations increasingly necessary for tracking illicit crypto flows 28:00-28:35.
Sources:
- 1:06-1:19 North Korea's crypto theft and laundering
- 5:54-7:30 Bybit breach technical details
- 9:12-17:31 Six money laundering techniques explained
- 17:43-24:41 AI agent demonstration and capabilities
- 25:36-27:25 Tracking challenges and limitations
- 28:00-28:35
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So, this is our first track today. Um, so buckle up and have a great ride. Um, the talk is called Where's My Crypto Dude? The ultimate guide to crypto money laundering. Hopefully, no one from the IRS is here. Uh, and the talker, that the speaker is Thomas Roachchia from France. And let's give him a big round of applause. Huh? And thank you guys for showing up today making Defvcon great again. Here you go. >> Thank you. >> Hello everyone and welcome to my talk. I'm super happy to be here today. This is the second time I'm speaking on the midstage on Devcon and this is a real honor. So thank you very much for coming today. Yes, thank you. It's been a long week, so thank you very much. All right, North Korean attackers have been targeting cryptocurrencies for a while to finance their operatio…