Lazarus laundered 50% of Bybit’s stolen funds

According to chain analytics site Lookonchain, the Lazarus Group, who will be hacking on February 21, has already washed 270,000 ETH, worth $655 million through the decentralized Exchange (DEX) Thorchain.

This amount It represents approximately 54% of the stolen funds During the attack, the platform’s total loss was estimated at $1.5 billion. According to the same source, the hackers still hold 229,395 ETH, worth $514 million.

In the following image, you can see some of the movements recorded by the sources mentioned above.

Bibit data

After the attack, Bybit launched the Lazarusbounty site with the aim of tracking the holdings and movement of funds stolen by the Lazarus group, in addition to promoting recovery.

According to information published on the platform, there is a significant portion of the total tracked funds. Sent to the network Bitcoinapproximately $430 million has been identified in 4,511 different wallets, representing almost 46% of stolen and tracked funds.

It is also estimated that 4,411 additional wallets will have an additional $366 million in the network created by Nakamoto At.

Additionally, according to information provided on the website created by Bybit, the Ethereum Lazarus Ecosystem maintains over $500 million with 7,640 addresses. It represents about 54% of the total amount stolen. Added to This means that hackers are held in other networks such as Solana (SOL), BNB Chain (BNB), and Arbitrum (ARB), but these accounts do not exceed 0.01% of the hacked funds.

Meanwhile, to promote collaboration, lazarusbound $140 million reward To those who provide information that allows for partial or total freezes of these assets.

Lazarus takes advantage of the “benefits” of distributed exchanges

As Cryptooticias recently reported, Lazarus transferred funds extracted from Bibit via several Dex, including Exchange, Chainflip, and Thorchain. Hackers are exploiting these exchanges ability to exchange assets without intensive intermediaries to hide traces of funds and complicate the pursuit.

Working dex No central authorities, encouraging interactions Directly among users, they were important in the group’s strategy of diversifying and washing assets using anonymously oriented designs.

This pattern of behavior is not new to Lazarus, and while repeated use of DEX is beneficial for legitimate user autonomy and privacy, it underscores how the decentralization characteristics do. It was misused for illegal purposescomplicates recovery efforts.