Bybit hacker launders 100% of stolen $1.4B crypto in 10 days

Key Points

  • The Bybit hacker laundered all stolen funds in just 10 days, primarily through THORChain.
  • Some of the assets might still be recoverable through blockchain tracing efforts.
  • North Korea's Lazarus Group identified as the main culprit behind the attack.
  • Bybit has replaced the stolen $1.4 billion in Ether and continued to honor customer withdrawals.

Summary

The Bybit hacker, responsible for the largest crypto theft in history, managed to launder all $1.4 billion worth of stolen assets within 10 days, primarily using the decentralized crosschain protocol THORChain. Despite this rapid laundering, blockchain security experts believe that some of the funds could still be traced and potentially recovered. The attack, which occurred on February 21, involved the theft of over $1.4 billion in various ERC-20 tokens, including liquid-staked Ether and Mantle Staked ETH. North Korea's Lazarus Group has been identified as the main perpetrator, with the stolen funds being converted despite sanctions against North Korean individuals for similar cybercrimes. Bybit has taken steps to mitigate the impact, replacing the stolen Ether and ensuring customer withdrawals continue. Blockchain security firms are now focusing on pre-emptive measures like offchain transaction validation to prevent future attacks, highlighting the importance of rapid response in such scenarios.

cointelegraph
March 5, 2025
Crypto
Read article

Related news