Bybit chief releases details on the movement of $1,4 billion stolen from the exchange
Over 68% of the stolen assets are still traceable on the blockchain
21.04.2025 - 12:40
593
4 min
0
What’s new? Bybit CEO Ben Zhou has published details about the February 21 hack of the crypto exchange by the DPRK hacker group Lazarus, making it the largest single theft in history. The entrepreneur reported that a total of 500 000 Ethereum (ETH) blockchain native tokens worth $1,4 billion were withdrawn from the exchange. Of these, 27,59% were missing, but 68,57% of the assets are still traceable on the blockchain. Another 3,84% was frozen through collaboration with third-party platforms.
What else is known? Untraceable funds were hidden thanks to transfers to cryptocurrency mixers, which were then routed via cross-chain protocols to peer-to-peer (P2P) and over-the-counter (OTC) platforms.
The Wasabi mixer is the most popular among North Korean hackers. They laundered some BTC through this service and only then distributed it to other services with similar functionality, including CryptoMixer, Tornado Cash, and Railgun.
How to launder $1,5 billion worth of crypto in 5 easy steps. Lazarus Group case
Crypto exchange Bybit managed to block only $42,8 million. This is less than 3% of the total value of stolen assets
After that, the funds were sent to cross-chain protocols and decentralized exchanges Thorchain, eXch, Lombard, LiFi, Stargate and SunSwap. Eventually, the assets ended up on P2P and OTC fiat currency exchange services.
The funds were then directed to cross-chain protocols and decentralized exchanges Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. The assets eventually ended up on P2P and OTC fiat currency exchange services.
The exchange’s analysts managed to establish the distribution of assets. Thus, 432 748 ETH worth $1,21 billion (84,45% of the total amount) was converted into bitcoins via Thorchain. Another 342 974 ETH worth $960,33 million (67,25%) was converted into 10 003 BTC on 35 772 crypto wallets (an average of 0,28 BTC each).
Another 5991 ETH worth $16,77 million (1,17%) remained in the Ethereum blockchain on 12 490 wallets (an average of 0,48 ETH each).
Further, 944 BTC worth $90,62 million (6,34%) was sent to the Wasabi mixer, while 531 BTC was transferred from to Ethereum via Thorchain.
In addition, over the past 60 days, the exchange team received 5443 analyst reports aimed at facilitating freezes and refunds. The authors of 70 of them were rewarded for providing useful information.
eXch exchange will close after allegations of laundering stolen assets from Bybit
The team emphasized that it does not intend to continue operating in a hostile environment
After the hack, Ben Zhou claimed that the exchange would be able to cover the losses in case the funds could not be returned. However, the team later launched an optimization process that will see the closure of a number of Web3 trading and passive income services, as well as the NFT marketplace.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026

Telegram
Twitter