
Following a $1.4B ETH hack on Bybit by Lazarus Group, over 70% of funds are traceable or frozen.
The sophisticated laundering process involved converting ETH to BTC and utilizing mixers and bridges.
This prompted Bybit to launch a bounty program for tracking.
Two months after the biggest crypto hack in history, Bybit CEO Ben Zhou has shared a long-awaited update – and itโs not all bad news. Of the $1.4 billion in stolen ETH, 68.57% remains traceable, and 3.84% has been frozen. However, 27.59% has effectively disappeared – likely laundered through privacy tools and cross-chain bridges.
But behind the numbers lies a deeper story – one that involves state-sponsored hackers, advanced laundering tactics, and a race against time.
Hereโs where things stand now.
Bybit Hack: Lazarus Group Strikes Again!
On February 21, 2025, North Koreaโs Lazarus Group exploited a free storage software tool used by Bybit. The breach led to the theft of 500,000 ETH, making it the largest crypto heist ever recorded.
Soon after the attack, the stolen ETH was quickly moved and converted into Bitcoin via Thorchain:
- 432,748 ETH (~$1.21B) swapped into BTC.
- 342,975 ETH (converted into 10,003 BTC) distributed across 35,772 wallets.
- 944 BTC (~$90M) passed through Wasabi Mixer.
- Some funds also flowed through CryptoMixer, Tornado Cash, Railgun, and bridging services like LiFi, Stargate, and SunSwap.
At the time of writing, 5,991 ETH (about $16.7 million) still sits on the Ethereum network, distributed across 12,490 wallets.
Bybit Launches LazarusBounty.com
In response to the attack, Bybit launched lazarusbounty.com, a platform aimed at enlisting blockchain investigators, white-hat hackers, and data analysts to help track and recover the stolen funds.
So far, 5,443 reports have been submitted through the site. Out of those, only 70 have been deemed valid. Bybit continues to call on more experts to join the effort, hoping to speed up the identification and recovery of the missing assets.
Crypto Hacks on the Rise
According to DeFiLlama, over $11.25 billion has been hacked from the crypto sector to date. In February 2025 alone, losses hit $1.464 billion, including the Bybit attack. April has already seen at least $12.5 million in hacks, including:
- ZKsync ($5M)
- KiloEx ($7.5M)
- UPCX (undisclosed)
We Are Far From Safe Today
The Bybit update highlights just how advanced laundering tactics have become, especially when carried out by state-backed groups like Lazarus. It also puts a spotlight on the growing security risks across the crypto ecosystem.
While a large portion of the stolen ETH is still traceable, the recovery process is complex and time-sensitive. Bybitโs bounty program could be a crucial tool in reclaiming lost assets – but it also serves as a reminder that security in Web3 still has a long way to go.
This isnโt just about one exchange getting hit; itโs a glimpse into how fragile even the biggest players can be.
Never Miss a Beat in the Crypto World!
Stay ahead with breaking news, expert analysis, and real-time updates on the latest trends in Bitcoin, altcoins, DeFi, NFTs, and more.