ZachXBT Penetrates Money Laundering Gang, Assists in Freezing Bybit Attack Funds

ZachXBT disclosed that it had disguised itself as a customer to infiltrate a gang suspected of laundering money for the North Korean hacker group Lazarus Group, and assisted in freezing funds related to the Bybit attack incident in 2025. In February 2025, Bybit suffered an attack valued at $1.5 billion, and ZachXBT discovered over 15 accounts seeking help with stolen fund transactions in Telegram and Discord groups. He contacted a user using the alias "Jimmy Green" and built trust through multiple transactions. On March 6, 2025, he transferred $3.497 million USDC to an Ethereum address to exchange USDC for TRON chain USDT, with the Gas funds traceable to the Bybit attack funds and marked as a blacklist address. In subsequent communications, the counterpart revealed that their team was involved in handling the stolen Bybit funds and stated that the funds would be transferred on chains such as Solana. ZachXBT discovered a wallet cluster involving over $12 million of Bybit attack funds, with fund paths including BTC, ETH, SOL, TRON, etc., of which approximately 442,000 USDT had been frozen by Tether. The gang also attempted to launder money through Uniswap liquidity pools and low liquidity tokens. Additionally, the counterpart revealed that they had helped process approximately $3 million in scam proceeds, and ZachXBT traced the relevant funds to a sanctioned Huione Guarantee wallet. ZachXBT invested $3.497 million in the investigation and assumed about 5% loss risk per transaction, with the intelligence obtained ultimately provided to relevant investigative agencies and law enforcement, having assisted in freezing over $75 million related to North Korean incidents since 2022.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.