{"id":125453,"date":"2025-03-20T09:16:51","date_gmt":"2025-03-20T09:16:51","guid":{"rendered":"http:\/\/cryptospotters.net\/?p=125453"},"modified":"2025-03-20T09:16:51","modified_gmt":"2025-03-20T09:16:51","slug":"bybit-89-of-stolen-1-4b-crypto-still-traceable-post-hack","status":"publish","type":"post","link":"http:\/\/cryptospotters.net\/?p=125453","title":{"rendered":"Bybit: 89% of stolen $1.4B crypto still traceable post-hack"},"content":{"rendered":"

Source: Cointelegraph.com NewsThe lion\u2019s share of the hacked Bybit funds is still traceable after the historic cybertheft, as blockchain investigators continue their efforts to freeze and recover these funds.
\nThe crypto industry was rocked by the largest hack in history on Feb. 21, when Bybit lost over $1.4 billion in liquid-staked Ether (stETH), Mantle Staked ETH (mETH) and other digital assets.
\nBlockchain security firms, including Arkham Intelligence, have identified North Korea\u2019s Lazarus Group as the likely culprit behind the Bybit exploit, as the attackers have continued swapping the funds in an effort to make them untraceable.
\nDespite the Lazarus Group\u2019s efforts, over 88% of the stolen $1.4 billion remains traceable, according to Ben Zhou, the co-founder and CEO of Bybit exchange.
\nThe CEO wrote in a March 20 X post:
\n\u201cTotal hacked funds of USD 1.4bn around 500k ETH. 88.87% remain traceable, 7.59% have gone dark, 3.54% have been frozen.\u201d
\n\u201c86.29% (440,091 ETH, ~$1.23B) have been converted into 12,836 BTC\u00a0 across 9,117 wallets (Average 1.41 BTC each),\u201d said the CEO, adding that the funds were mainly funneled through Bitcoin (BTC) mixers including Wasbi, CryptoMixer, Railgun and Tornado Cash.
\nSource: Ben ZhouThe CEO\u2019s update comes nearly a month after the exchange was hacked. It took the Lazarus Group 10 days to launder 100% of the stolen Bybit funds through the decentralized crosschain protocol THORChain, Cointelegraph reported on March 4.
\nStill, blockchain security experts are hopeful that a portion of these funds can be frozen and recovered by Bybit.
\nRelated: Can Ether recover above $3K after Bybit\u2019s massive $1.4B hack?
\nBybit paid $2.2M for Lazarus \u201cbounty hunters\u201d
\nThe crypto industry needs more blockchain \u201cbounty hunters\u201d and white hat, or ethical hackers, to combat the growing illicit activity from North Korean actors.
\nDecoding transaction patterns through cryptocurrency mixers remains the biggest challenge in tracing these funds, Bybit\u2019s CEO wrote, adding:
\n\u201cIn the past 30 days, 5012 bounty reports were received of which 63 were valid bounty reports. We welcome more reports, we need more bounty hunters that can decode mixers as we need a lot of help there down the road.\u201d
\nSource: LazarusbountyBybit has awarded over $2.2 million worth of funds to 12 bounty hunters for relevant information that may lead to the freezing of the funds. The exchange is offering 10% of the recovered funds as a bounty for white hat hackers and investigators.
\nRelated: Bybit exploit exposes security flaws in centralized crypto exchanges
\nThe Bybit attack highlights that even centralized exchanges with strong security measures remain vulnerable to sophisticated cyberattacks, analysts say.
\n\u201cThis incident is another stark reminder that even the strongest security measures can be undone by human error,\u201d Lucien Bourdon, an analyst at Trezor, told Cointelegraph.
\nBourdon explained that attackers used a sophisticated social engineering technique, deceiving signers into approving a malicious transaction that drained crypto from one of Bybit’s cold wallets.
\nThe Bybit hack is more than twice the size of the $600 million Poly Network hack in August 2021, making it the largest crypto exchange breach to date.
\nMagazine: Trump\u2019s crypto ventures raise conflict of interest, insider trading questionsRead More<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Source: Cointelegraph.com NewsThe lion\u2019s share of the hacked Bybit funds is still traceable after the historic cybertheft, as blockchain investigators continue their efforts to freeze and recover these funds. The… <\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"_links":{"self":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts\/125453"}],"collection":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=125453"}],"version-history":[{"count":0,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=\/wp\/v2\/posts\/125453\/revisions"}],"wp:attachment":[{"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=125453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=125453"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/cryptospotters.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=125453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}