Connect with us

Published

on

Crypto swapper eXch shows signs of life after post-Bybit shutdown

Once a go-to swapper for hackers and drainers, eXch was shut down by German police in April — but continued activity suggests the story isn’t over.

Without Know Your Customer (KYC) checks, eXch wasn’t your typical crypto exchange. It acted more like an instant swapper, allowing bad actors and cybercriminals to fly under the radar for years.

Among its clients was the Lazarus Group. The North Korean state-backed hacking unit thrust eXch into the spotlight back in February, when it used the platform to funnel some of the $1.4 billion it stole from Bybit. When Bybit traced its stolen funds to eXch, it requested assistance — but the platform refused.

This led to a fierce discussion over privacy versus security, but ultimately, eXch announced it would close its doors on April 17; on April 30, German authorities made it official.

But according to security firm TRM Labs, the platform may have continued operating in stealth mode after the takedown. Here’s the rise, fall and afterlife of alleged crypto laundromat eXch.

eXch shuts front door, keeps back door unlocked

Alongside its shutdown announcement, eXch posted a message claiming it would not facilitate criminal proceeds. The post was removed within hours, and operations quietly resumed — signs of an internal disagreement or perhaps even a calculated attempt to lower visibility, according to TRM.

Crypto swapper eXch shows signs of life after post-Bybit shutdown
CSAM-related fund flows traced to eXch. Source: TRM Labs

German authorities seized eXch’s servers and confiscated 34 million euros ($38 million) in crypto, along with more than eight terabytes of data, effectively dismantling its public-facing infrastructure.

Related: North Korean spy slips up, reveals ties in fake job interview

“Just like we saw with Garantex rebranding as Grinex, eXch didn’t fully die after the shutdown. It quietly kept servicing a handful of partners via API, which meant laundering activity continued even after the public takedown,” said Jeremiah O’Connor, co-founder and chief technology officer of security firm Trugard.

O’Connor added that it’s not unlikely for such platforms to serve loyal customers even after seizures.

Crypto swapper eXch shows signs of life after post-Bybit shutdown
EXch website visited on May 13. Source: eXch

“The people behind eXch.ch took full advantage of operating across multiple countries. The domain was registered through a UK-based provider, listed Switzerland as an admin location, hosted infrastructure in France, and had servers seized in Germany,” O’Connor said.

It’s still unclear if eXch will kill its API or come back under a new name. TRM said in the May 2 blog post that the platform’s remaining back-end access continued to provide anonymization infrastructure for threat actors.

No KYC, pooled liquidity draws illicit funds to eXch

EXch’s origins trace back to 2014, according to “Fantasy,” lead investigator at crypto insurance firm Fairside Network. In an October 2024 investigation, Fantasy identified the platform’s first public appearance as a BitcoinTalk forum account promoting automatic swaps between Bitcoin (BTC), Perfect Money and BTC-e vouchers — payment methods commonly associated with high-risk transactions.

Fantasy also traced the original Bitcoin wallet tied to eXch and found it was likely funded via BTC-e, the now-defunct crypto exchange shuttered by US authorities in 2017 for its role in laundering criminal proceeds.

Fantasy’s forensic research found that the modernized form of eXch emerged in 2022, when its Ethereum hot wallet was first funded. Not long after, it became a hub for prominent crypto drainers.

Monkey Drainer — the first known large-scale drainer-as-a-service operator — used eXch before its retirement. Other draining service providers like Pink Drainer and Inferno Drainer also passed funds through the platform, along with several major exploiters.

Crypto swapper eXch shows signs of life after post-Bybit shutdown
EXch’s modern wallets traced to accounts held at Binance and OKX. Source: Fantasy/MetaSleuth

EXch required no identity verification, allowing users to move funds with anonymity. That made it an attractive tool for cybercriminals looking to clean stolen assets.

“EXch managed to stay active for years — despite facilitating obvious illicit activity — because there’s still a big gap between what regulators ‘can’ do and how fast technology is moving,” Amit Levin, former investigator at Binance, told Cointelegraph.

“In today’s world, anyone can launch a smart contract or run a crypto service from anywhere, often without revealing who they are. And if there’s no registration, no KYC and no one to hold accountable, enforcement becomes close to impossible.”

The platform also drew confidence from threat actors by using a pooled liquidity system that blended user deposits and withdrawals, making it difficult for investigators and law enforcement to trace the flow of funds.

When eXch knew and did nothing

EXch denied laundering funds for North Korean crypto hackers, and in its shutdown notice, it framed the project as an attempt by privacy enthusiasts to “restore balance” in the industry. It criticized Anti-Money Laundering enforcement and condemned companies offering address risk scoring APIs as “parasites” profiting off government fear.

“Service providers in the crypto space are, for the most part, not decentralized; that is, they retain control over or access to customers’ assets, as demonstrated in the case of eXch,” Gal Arad Cohen, partner at S. Horowitz & Co, told Cointelegraph.

“A financial intermediary operating in the crypto sector faces risks similar to those of traditional financial service providers and should, therefore, be held to equivalent standards and regulatory requirements,” she said.

The closure of eXch is a “huge win” for crypto, according to Alex Katz, CEO of security firm Kerberus. However, Katz warned that bad actors can migrate to alternative projects, like THORChain, which received a shoutout in eXch’s unapologetic farewell manifesto.

In the Bybit hack, decentralized swap protocol THORChain was used as the main bridge to swap around 500,000 Ether (ETH) to Bitcoin.

Crypto swapper eXch shows signs of life after post-Bybit shutdown
EXch operators also used THORChain to allegedly obfuscate trails. Source: Tanuki42

EXch stated that its partners would retain access to its API for a limited time, but future operations would depend on the “new management team.” The old team recommended setting up new liquidity pools to maintain seamless functionality and said it would provide consultations.

It signed off with a defiant message: “Privacy is not a crime.”

German authorities reported that $1.9 billion in crypto flowed into eXch since its inception. Its operators are suspected of commercial money laundering and running a criminal trading platform.

Magazine: ChatGPT a ‘schizophrenia-seeking missile,’ AI scientists prep for 50% deaths: AI Eye

Continue Reading

Politics

Can PM turn diplomatic work with Macron into concrete action on migration?

Published

on

By

Can PM turn diplomatic work with Macron into concrete action on migration?

Emmanuel Macron addressing parliament in the Palace of Westminster’s Royal Gallery was a highly anticipated moment in the long history of our two nations.

That story – the conflict and a historic Anglo-French agreement that ended centuries of feuding, the Entente Cordiale – adorn the walls of this great hall.

Looming over the hundreds of MPs and peers who had gathered in the heat to hear the French president speak, hang two monumental paintings depicting British victories in the Napoleonic wars, while the glass stand in the room commemorates the 408 Lords who lost their lives fighting for Europe in two world wars.

Politics latest: UK and France will get ‘tangible results’ on migration

The French president came to parliament as the first European leader to be honoured with a state visit since Brexit.

It was the first address of a French president to parliament since 2008, and Mr Macron used it to mark what he called a new era in Anglo-Franco relations.

Please use Chrome browser for a more accessible video player

Sky News’ political correspondent Tamara Cohen was watching Emmanuel Macron’s speech. She highlights the president saying he wants to see tangible results on migration.


Peers and MPs cheered with delight when he confirmed France would loan the Bayeux Tapestry to the UK in the run-up to the anniversary of William the Conqueror’s birthday.

“I have to say, it took properly more years to deliver that project than all the Brexit texts,” he joked as former prime minister Theresa May watched on from the front row

From Brexit to migration, European security, to a two-state solution and the recognition of Palestine, Mr Macron did not shy away from thorny issues, as he turned the page on Brexit tensions woven through Anglo-French relations in recent years, in what one peer described to me as a “very political speech rather than just the usual warm words”.

Macron addressing Parliament
Image:
Emmanuel Macron addresses parliament

He also used this address to praise Sir Keir Starmer, sitting in the audience, for his leadership on security and Ukraine, and his commitment to the international order and alliances forged from the ashes of the Second World War. For that, he received a loud ovation from the gathered parliamentarians.

Please use Chrome browser for a more accessible video player

Macron’s first-ever state visit: personal or political?

Read more:
Thatcher loyalist Norman Tebitt dies aged 94
Public finances in ‘relatively vulnerable position’

The test now for Sir Keir is whether he can turn his deft diplomatic work in recent months with Mr Macron into concrete action to give him a much-needed win on the domestic front, particularly after his torrid week on welfare.

The government hopes that France’s aim for “cooperation and tangible results” at the upcoming political summit as part of this state visit, will give Starmer a much-needed boost.

The PM is attempting to drive-down crossings by negotiating a one-in one-out return treaty with France.

Under this plan, those crossing the Channel illegally will be sent back to France in exchange for Britain taking in an asylum seeker with a family connection in the UK.

But as I understand it, the deal is still in the balance, with some EU countries unhappy about France and the UK agreeing on a bilateral deal.

Continue Reading

Politics

UK and France have ‘shared responsibility’ to tackle illegal migration, Emmanuel Macron says

Published

on

By

UK and France have 'shared responsibility' to tackle illegal migration, Emmanuel Macron says

Emmanuel Macron has said the UK and France have a “shared responsibility” to tackle the “burden” of illegal migration, as he urged co-operation between London and Paris ahead of a crunch summit later this week.

Addressing parliament in the Palace of Westminster on Tuesday, the French president said the UK-France summit would bring “cooperation and tangible results” regarding the small boats crisis in the Channel.

Politics latest: Lord Norman Tebbit dies, aged 94

Mr Macron – who is the first European leader to make a state visit to the UK since Brexit – told the audience that while migrants’ “hope for a better life elsewhere is legitimate”, “we cannot allow our countries’ rules for taking in people to be flouted and criminal networks to cynically exploit the hopes of so many individuals with so little respect for human life”.

“France and the UK have a shared responsibility to address irregular migration with humanity, solidarity and fairness,” he added.

Looking ahead to the UK-France summit on Thursday, he promised the “best ever co-operation” between France and the UK “to fix today what is a burden for our two countries”.

Sir Keir Starmer will hope to reach a deal with his French counterpart on a “one in, one out” migrant returns deal at the key summit on Thursday.

King Charles also addressed the France-UK summit at the state banquet in Windsor Castle on Tuesday evening, saying it would “deepen our alliance and broaden our partnerships still further”.

King Charles speaking at state banquet welcoming Macron.
Image:
King Charles speaking at state banquet welcoming Macron.

Sitting next to President Macron, the monarch said: “Our armed forces will cooperate even more closely across the world, including to support Ukraine as we join together in leading a coalition of the willing in defence of liberty and freedom from oppression. In other words, in defence of our shared values.”

In April, British officials confirmed a pilot scheme was being considered to deport migrants who cross the English Channel in exchange for the UK accepting asylum seekers in France with legitimate claims.

The two countries have engaged in talks about a one-for-one swap, enabling undocumented asylum seekers who have reached the UK by small boat to be returned to France.

👉Listen to Politics at Sam and Anne’s on your podcast app👈       

Britain would then receive migrants from France who would have a right to be in the UK, like those who already have family settled here.

The small boats crisis is a pressing issue for the prime minister, given that more than 20,000 migrants crossed the English Channel to the UK in the first six months of this year – a rise of almost 50% on the number crossing in 2024.

France's President Emmanuel Macron speaks at the Palace of Westminster during a state visit to the UK
Image:
President Macron greets Commons Speaker Sir Lindsay Hoyle at his address to parliament in Westminster.

Elsewhere in his speech, the French president addressed Brexit, and said the UK could not “stay on the sidelines” despite its departure from the European Union.

He said European countries had to break away from economic dependence on the US and China.

Read more:
French police forced to watch on as migrants attempt crossing
Public finances in ‘relatively vulnerable position’, OBR warns

“Our two countries are among the oldest sovereign nations in Europe, and sovereignty means a lot to both of us, and everything I referred to was about sovereignty, deciding for ourselves, choosing our technologies, our economy, deciding our diplomacy, and deciding the content we want to share and the ideas we want to share, and the controversies we want to share.

“Even though it is not part of the European Union, the United Kingdom cannot stay on the sidelines because defence and security, competitiveness, democracy – the very core of our identity – are connected across Europe as a continent.”

Continue Reading

Politics

UN criticises Starmer’s welfare reforms and warns measures will ‘increase poverty rates’

Published

on

By

UN criticises Starmer's welfare reforms and warns measures will 'increase poverty rates'

A UN committee on disability rights has criticised the UK government’s welfare reforms, saying they will “increase poverty rates”. 

In an intervention likely to be seized on by MPs seeking to further water down the measures, the committee asks ministers for answers on 10 issues surrounding the benefit changes – and says the reforms risk “regression” for disabled people.

The committee, which reports to the Office of the High Commissioner for Human Rights, asks about British politicians suggesting people are defrauding the benefits system.

Chancellor Rachel Reeves and Prime Minister Sir Keir Starmer at the launch of the 10-year health plan in east London. Pic: PA
Image:
Chancellor Rachel Reeves and Prime Minister Sir Keir Starmer at the launch of the 10-year health plan in east London. Pic: PA

One point on which it wants clarification is: “Public statements by politicians and authorities portraying persons with disabilities as making profit of social benefits, making false statements to get social and disability benefits or being a burden to society.”

Other questions are on the impact the measures will have on “young persons, new claimants of disability benefits, women with disabilities, persons with disabilities with high level supports” and others.

They ask ministers about what measures they have taken to address “the foreseeable risk of increasing poverty rates amongst persons with disabilities if cuts are approved” and claim the welfare bill has had “limited scrutiny”.

The letter claims that the committee has “received credible information” that the Universal Credit and Personal Independent Payment Bill “will deepen the signs of regression” that the committee warned about in a report last year on the cost of living crisis and its impact on disabled people.

More on Labour

An intervention by the UN will be an embarrassment to the government, which has promised its welfare reforms will help disabled people into work.

Please use Chrome browser for a more accessible video player

Welfare bill blows ‘black hole’ in chancellor’s accounts

Liz Kendall, the welfare secretary, was criticised heavily earlier in the year for saying some people on benefits were “taking the mickey”.

After a chaotic first vote in Parliament on 1 July, in which MPs succeeded in watering down the reforms significantly, the government now says its reforms will lift 50,000 people out of poverty. The bill was backed by 335 MPs, with 260 against – a majority of 75.

Read more:
This has been PM’s most damaging U-turn yet
Is Starmer at the mercy of his MPs?

The first version of the reforms would have – the government’s assessment said – pushed 250,000 people into poverty.

Charities are urging MPs to continue to push for further changes – including on cuts to Universal Credit sickness payments.

Please use Chrome browser for a more accessible video player

Labour welfare rebel wants ‘respect’

A different UN committee heavily criticised benefit changes made by the Conservatives in 2016 and called on the UK to take “corrective measures” when Labour came into office.

The UN’s committee on Economic, Social and Cultural Rights (CESCR) concluded that “welfare reform” measures introduced by Conservative-led governments in 2012 and 2016 had disproportionately affected disabled people, low-income families, and workers in “precarious employment”.

The committee said this had led to “severe economic hardship, increased reliance on food banks, homelessness, negative impacts on mental health, and the stigmatisation of benefit claimants”.

The Department for Work and Pensions has been contacted for comment.

The Universal Credit and Personal Independent Payment Bill returns to the Commons on Wednesday for its remaining stages.

Mikey Erhardt, policy lead at Disability Rights UK, said: “The fact that the UN has yet again felt it needs to write to the UK government about our cruel and punitive social security system should be a national shame.

“We hope this letter is a wake-up call for MPs. Despite all the chaos of the last-minute climbdowns and concessions, the Universal Credit bill remains broken.

“There are still billions of cuts on the table, and we urge MPs to approach tomorrow’s proceedings with caution as their vote will have serious implications for disabled people across the country.

“If disabled people feel unable to trust the government’s promises on co-production and the UN needed to raise concerns over the bill’s impact, how can MPs vote this bill through?”

Continue Reading

Trending