Bybit chief releases details on the movement of $1,4 billion stolen from the exchange
Over 68% of the stolen assets are still traceable on the blockchain

21.04.2025 - 12:40
84
4 min
0
What’s new? Bybit CEO Ben Zhou has published details about the February 21 hack of the crypto exchange by the DPRK hacker group Lazarus, making it the largest single theft in history. The entrepreneur reported that a total of 500 000 Ethereum (ETH) blockchain native tokens worth $1,4 billion were withdrawn from the exchange. Of these, 27,59% were missing, but 68,57% of the assets are still traceable on the blockchain. Another 3,84% was frozen through collaboration with third-party platforms.
What else is known? Untraceable funds were hidden thanks to transfers to cryptocurrency mixers, which were then routed via cross-chain protocols to peer-to-peer (P2P) and over-the-counter (OTC) platforms.
The Wasabi mixer is the most popular among North Korean hackers. They laundered some BTC through this service and only then distributed it to other services with similar functionality, including CryptoMixer, Tornado Cash, and Railgun.

How to launder $1,5 billion worth of crypto in 5 easy steps. Lazarus Group case
Crypto exchange Bybit managed to block only $42,8 million. This is less than 3% of the total value of stolen assets
After that, the funds were sent to cross-chain protocols and decentralized exchanges Thorchain, eXch, Lombard, LiFi, Stargate and SunSwap. Eventually, the assets ended up on P2P and OTC fiat currency exchange services.
The funds were then directed to cross-chain protocols and decentralized exchanges Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. The assets eventually ended up on P2P and OTC fiat currency exchange services.
The exchange’s analysts managed to establish the distribution of assets. Thus, 432 748 ETH worth $1,21 billion (84,45% of the total amount) was converted into bitcoins via Thorchain. Another 342 974 ETH worth $960,33 million (67,25%) was converted into 10 003 BTC on 35 772 crypto wallets (an average of 0,28 BTC each).
Another 5991 ETH worth $16,77 million (1,17%) remained in the Ethereum blockchain on 12 490 wallets (an average of 0,48 ETH each).
Further, 944 BTC worth $90,62 million (6,34%) was sent to the Wasabi mixer, while 531 BTC was transferred from to Ethereum via Thorchain.
In addition, over the past 60 days, the exchange team received 5443 analyst reports aimed at facilitating freezes and refunds. The authors of 70 of them were rewarded for providing useful information.

eXch exchange will close after allegations of laundering stolen assets from Bybit
The team emphasized that it does not intend to continue operating in a hostile environment
After the hack, Ben Zhou claimed that the exchange would be able to cover the losses in case the funds could not be returned. However, the team later launched an optimization process that will see the closure of a number of Web3 trading and passive income services, as well as the NFT marketplace.
Useful material?
Market
According to anonymous sources, Facebook’s parent company will add support for USDT and USDC
May 9, 2025
Market
An on-chain analysis revealed buyer activity minutes before the official launch announcement
May 6, 2025
Incidents
Most validators implemented the necessary changes back in April
May 5, 2025
Politics
The organization highlighted allegations against the creators of the Tornado Cash mixer
Apr 29, 2025
Market
Earlier this month, the company had already invested over $11 million in the asset
Apr 28, 2025
Market
You can get up to six years in prison with a fine of up to 1 million RUB for handing over your cards and digital wallets to fraudsters
Apr 28, 2025