Cryptocurrency payments and gift card platform Bitrefill has blamed the North Korea-linked hacking group Lazarus for a cyberattack on March 1, 2026, that compromised parts of its infrastructure and cryptocurrency wallets.

The attackers gained access to production keys, transferred funds from hot wallets, and exposed 18,500 purchase records containing emails, payment addresses, and IP addresses.

Approximately 1,000 records included encrypted usernames. Affected users were notified. Operations have resumed, with the company announcing to cover losses from operational capital. The incident underscores the importance of vigilance regarding crypto and on-chain security.

The modus operandi included malware, on-chain tracing and reused IP and email addresses and was similar to previous attacks attributed to North Korea’s Lazarus Group, also known as Bluenoroff, the company said in a detailed report on X.

The Lazarus Group has previously targeted crypto projects including Ronin Network, Harmony’s Horizon Bridge, WazirX, and Atomic Wallet.

How the attack unfolded

It all began with with a compromised employee laptop, which exposed legacy credentials and allowed attackers to access Bitrefill’s broader infrastructure, including parts of its database and cryptocurrency wallets.

The breach quickly became apparent when the company noticed unusual purchasing patterns among certain suppliers, signaling that attackers were exploiting its gift card inventory and supply chains. The firm also noted that attackers were draining some hot wallets and moving funds to their own addresses, following which, the system was taken offline to contain the damage.

“Bitrefill operates a global e-commerce business with dozens of suppliers, thousands of products, and multiple payment methods across many countries. Safely switching all these things off and bringing them back online is not trivial,” the company said in a statement.

Since the incident, Bitrefill has been working with security researchers, incident response teams, on-chain analysts, and law enforcement to investigate the breach.

Customer data impact

Hackers accessed a small set of purchase records, approximately 18,500, containing

Bitrefill said there is no evidence that customer data was a primary target. Its logs indicate that attackers ran a limited number of queries aimed at cryptocurrency holdings and gift card inventory rather than extracting the entire database.

The platform stores minimal personal data and does not require mandatory KYC. A small subset of purchase records, approximately 18,500, was accessed, containing information such as email addresses, crypto payment addresses, and metadata including IP addresses. About 1,000 records contained encrypted names for specific products; the company is treating this data as potentially compromised and has notified affected customers directly by email.

At present, Bitrefill does not believe customers need to take any additional action, though it advises caution regarding unexpected communications related to Bitrefill or cryptocurrency.

Steps to strengthen security

In response to the breach, Bitrefill said it has already strengthened its cybersecurity practices and is working to draw lessons from the incident.

The company outlined several measures, including conducting comprehensive penetration tests with external experts, tightening internal access controls, enhancing logging and monitoring for faster threat detection, and refining incident response procedures and automated shutdown protocols.

Looking forward

Bitrefill acknowledged that this was its first major attack in more than a decade of operation but stressed that it remains well-funded and profitable, capable of absorbing operational losses. Most systems, including payments, stock, and accounts, are back online, with sales volumes returning to normal.

“Getting hit by a sophisticated attack sucks (a lot),” the company said. “But we survived. We will continue to do our best to continue deserving our customers’ trust.”

Cryptocurrency markets are increasingly shaped not only by technology and finance but also by global geopolitical developments.

From armed conflicts and sanctions to trade disputes and energy shocks, geopolitical tensions now play a direct role in driving volatility, investor behavior, and long term narratives in the crypto space. This FAQ explainer examines how and why global instability influences digital assets, and what it means for investors and policymakers.

What are geopolitical tensions in the context of financial markets

Geopolitical tensions refer to conflicts, rivalries, and uncertainties between countries or regions that can disrupt economic stability. These include military conflicts, diplomatic crises, sanctions, trade wars, and political instability.

In traditional markets, such tensions often lead to volatility in stocks, commodities, and currencies. Increasingly, cryptocurrencies are also reacting to these developments, reflecting their growing integration into the global financial system.

Why do geopolitical events impact cryptocurrency markets

Geopolitical events affect investor confidence, capital flows, and economic expectations. When uncertainty rises, investors reassess risk and often reallocate assets.

Cryptocurrencies are sensitive to these shifts because they are still considered high risk assets. At the same time, they offer unique features such as decentralization and borderless transactions, which can make them attractive during certain types of crises.

As a result, geopolitical events can both boost and weaken crypto markets depending on the nature of the situation.

Is crypto considered a safe haven during geopolitical crises

The idea of cryptocurrencies as safe haven assets is complex and still evolving.

In theory, Bitcoin has characteristics similar to gold, including limited supply and independence from central banks. This has led some investors to treat it as a hedge against geopolitical instability.

In practice, however, crypto often behaves like a risk asset. During major global shocks, such as sudden escalations in conflict, investors may sell crypto alongside stocks to reduce exposure.

That said, in specific situations involving currency instability or restricted access to banking systems, cryptocurrencies can function as a practical alternative for storing and transferring value.

How do wars and military conflicts influence crypto prices

Military conflicts create uncertainty in global markets, affecting investor sentiment and economic expectations.

In the early stages of conflict, markets often react with sharp volatility. Crypto prices may drop as investors move to safer assets or cash. However, if the conflict leads to prolonged instability, crypto can benefit from increased demand as an alternative financial system.

Conflicts can also drive real world use cases for crypto. In some regions, individuals and organizations use digital assets to move funds across borders quickly when traditional systems are disrupted.

What is the effect of economic sanctions on crypto markets

Sanctions are a major geopolitical tool that can have direct implications for cryptocurrencies.

When countries or entities are cut off from global financial systems, they may turn to alternative channels, including crypto, to conduct transactions. This can increase demand for digital assets in affected regions.

At the same time, governments and regulators closely monitor such activity, leading to stricter rules and enforcement measures. This creates a balance between increased usage and increased regulatory pressure.

Sanctions can also impact global energy markets and currencies, indirectly influencing crypto prices.

Can crypto be used to bypass sanctions

There is ongoing debate about the extent to which cryptocurrencies can be used to bypass sanctions.

While crypto offers a degree of anonymity and decentralization, large scale transactions are still traceable on public blockchains. Authorities have developed tools to monitor suspicious activity and enforce compliance.

However, smaller scale usage and peer to peer transactions can still occur outside traditional oversight. This has raised concerns among regulators and contributed to increased scrutiny of the crypto sector.

How do energy markets and oil prices affect crypto

Geopolitical tensions often impact energy markets, particularly oil and gas prices. These changes can influence crypto markets in several ways.

Higher energy prices can increase inflation, which may drive interest in alternative assets like Bitcoin. At the same time, rising costs can reduce disposable income and limit retail investment in crypto.

Energy prices also directly affect crypto mining operations, especially for proof of work networks like Bitcoin. Higher electricity costs can reduce profitability for miners and influence network dynamics.

What is the relationship between crypto and traditional safe haven assets

Cryptocurrencies are often compared to traditional safe haven assets such as gold and government bonds.

During geopolitical crises, gold typically rises as investors seek stability. Crypto has sometimes followed this pattern but not consistently.

In many cases, crypto correlates more closely with equities, particularly technology stocks. This suggests that it is still viewed primarily as a growth oriented asset rather than a defensive one.

However, the correlation can shift over time, especially as the market matures.

How do currency crises influence crypto adoption

Currency instability is one of the strongest drivers of crypto adoption.

In countries experiencing high inflation or currency devaluation, individuals may turn to cryptocurrencies to preserve value. This is particularly evident in regions facing economic crises or strict capital controls.

Geopolitical tensions can trigger such conditions, increasing demand for digital assets as an alternative to local currencies.

This type of adoption is often practical rather than speculative, focusing on utility rather than investment returns.

What role do central banks and governments play

Governments and central banks respond to geopolitical tensions with policies that can affect crypto markets.

These include interest rate changes, capital controls, sanctions, and regulatory measures. Each of these actions can influence investor behavior and market dynamics.

In addition, many countries are exploring central bank digital currencies. These initiatives are partly driven by the desire to maintain control over financial systems in an increasingly digital and geopolitically complex world.

How do global trade tensions affect crypto

Trade disputes and tariffs can disrupt global supply chains and economic growth. This uncertainty can lead to volatility in financial markets, including crypto.

Investors may adjust their portfolios in response to changing economic conditions, affecting demand for digital assets.

Trade tensions can also influence currency values, which in turn impact crypto markets. For example, a weakening currency may drive local investors toward cryptocurrencies.

Does crypto benefit from financial system distrust

One of the core narratives behind crypto is its independence from traditional financial institutions.

During periods of geopolitical tension, trust in banks and governments can decline. This can increase interest in decentralized systems that operate outside traditional frameworks.

This narrative is particularly strong among certain investor groups and can contribute to increased demand during times of crisis.

What are the risks of relying on crypto during geopolitical instability

While crypto offers potential advantages, it also carries risks.

Price volatility can undermine its effectiveness as a stable store of value. Regulatory crackdowns can limit access or usage in certain regions.

Security risks, including hacks and fraud, remain concerns. In addition, technological barriers can make it difficult for some users to adopt crypto during crises.

These factors mean that crypto is not a universal solution to geopolitical challenges.

How are regulators responding to the geopolitical dimension of crypto

Regulators are increasingly aware of the intersection between crypto and geopolitics.

Efforts are underway to strengthen compliance requirements, improve monitoring of transactions, and prevent illicit use of digital assets.

International cooperation is also expanding, with governments sharing information and developing coordinated approaches to regulation.

These measures aim to balance innovation with security and stability.

What does this mean for investors

For investors, geopolitical awareness is becoming essential in understanding crypto markets.

Monitoring global developments can provide insights into potential market movements. However, predicting the exact impact of geopolitical events remains challenging.

Investors should consider diversification, risk management, and long term strategies rather than reacting to short term news.

Understanding the broader context can help in making more informed decisions.

How might the role of crypto evolve in future geopolitical crises

As the crypto market matures, its role in global finance is likely to expand.

In future crises, cryptocurrencies may become more integrated into financial responses, both as investment assets and as practical tools for transferring value.

At the same time, regulatory frameworks will continue to evolve, shaping how crypto is used and perceived.

The balance between decentralization and oversight will be a key factor in determining its future role.

Conclusion

Geopolitical tensions are now a central factor influencing cryptocurrency markets. They affect investor sentiment, economic conditions, and real world usage of digital assets.

While crypto can offer alternatives during periods of instability, it also remains highly volatile and sensitive to global developments.

Understanding the complex relationship between geopolitics and crypto is essential for navigating this rapidly evolving market. As global uncertainty continues, cryptocurrencies are likely to play an increasingly visible role in the financial landscape.

News.Az 

By Faig Mahmudov