Furthermore, Wasabi's parent company, zSnacks, stopped offering CoinJoin services shortly after Samourai was shut down, citing the risk of legal consequences for handling illicit transactions. Other services have emerged to offer CoinJoin features through the Wasabi protocol, with "Kruw.io" becoming the most prolific one. Numerous illicit actors use Kruw.io to launder funds including the Lazarus Group, a North Korean hacking collective also known as APT38 and Trader Traitor which is subject to U.S. and international sanctions. The Lazarus Group has previously used Kruw.io to mix approximately $14.3 million in cryptocurrency stolen by the North Korean regime. The Lazarus Group is currently laundering some proceeds of the $1.5 billion Bybit hack through the Kruw.io service.