Bybit hackers moves stolen funds through crypto mixers and Wasabi Wallet

Source Cryptopolitan

Blockchain analytics company Elliptic has revealed that the group behind the Bybit hack has started laundering funds. In an update to its February 23 report, the firm said the Lazarus Group, which is behind the hack, has started laundering funds with Bitcoin mixers.

According to Elliptic, Lazarus is using Cryptomixer and Wasabi Wallet to launder the stolen funds, which it had earlier converted to Bitcoin through the eXch exchange. The move appears to be the final step in the hackers’ effort to hide any traces of the stolen $1.4 billion.

eXch daily BTC trading volume after Bybit hack (Source: Elliptic)

It wrote:

“As with other North Korea-linked thefts, this bitcoin has now begun to be passed through mixers to further obfuscate the transaction trail. This process has just begun, but stolen assets worth hundreds of thousands of dollars have already been sent through Cryptomixer and Wasabi Wallet.”

While the hackers’ choice of mixers might surprise most people,  it highlights the expertise of the North Korean hackers, whom Elliptic describes as the “most sophisticated and well-resourced launderer of crypto assets in existence.” It also shows how most bad actors convert stolen assets into Bitcoin as part of the laundering process and use diverse ways to make the assets untraceable.

Cryptomixer is a centralized mixer that has existed since 2016. Like all traditional mixers, users dump assets into one pool controlled by the operator and withdraw their funds, excluding fees, using other addresses. Despite being around for almost a decade, the platform has managed to avoid being targeted by law enforcement agencies.

On its part, the Wasabi wallet is not a traditional mixing service. It is actually a fully non-custodial privacy wallet that uses Coinjoin transactions to hide the transaction trail. This is not the first time that bad actors will use Wasabi, with an Elliptic report from 2022 showing that Chinese spies used it to pay bribes to a US double agent.

So far, only hundreds of thousands have been moved through the mixers, and several crypto investigators continue to follow the money trail despite the mixing to prevent the hackers from cashing out on the stolen assets.

Extra $43k in Bybit money frozen on OKX

Meanwhile, efforts to recover as much of the Bybit funds as possible from the bad actors remain underway as the hackers try to convert the stolen funds to cash on centralized exchanges.

According to the most recent report from on-chain sleuth ZachXBT, $43,0000 connected to the hack has been frozen on OKX in collaboration with the OKX team.

While this might seem small given the total amount stolen, it highlights the highly collaborative approach that the crypto community has adopted in tracing and recovering stolen funds. Elliptic has been busy tracing the funds while Web3 forensics company zeroShadow is also assisting with tracking and freezing the stolen assets.

So far, their efforts have yielded the freezing of over 3%  of the stolen assets, around $50 million. However, about 20% of the funds ($280 million) have reportedly become untraceable, showing how effectively the hackers are hiding their transaction trail.

Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do it with DeFi in our upcoming webclass. Save Your Spot

Disclaimer: For information purposes only. Past performance is not indicative of future results.
placeholder
Bitcoin Weekly Forecast: The calm before the stormBitcoin (BTC) price remains steady above a key support level, trading slightly above $106,000 at the time of writing on Friday.
Author  FXStreet
Yesterday 10: 12
Bitcoin (BTC) price remains steady above a key support level, trading slightly above $106,000 at the time of writing on Friday.
placeholder
Bitcoin Investments in Japan Surge as Firms Hedge Against Yen WeaknessThe crypto market is witnessing a surge in participation from Japanese public companies such as Metaplanet, ANAP, Remixpoint, and Gumi.
Author  Beincrypto
Yesterday 10: 08
The crypto market is witnessing a surge in participation from Japanese public companies such as Metaplanet, ANAP, Remixpoint, and Gumi.
placeholder
WTI Oil remains steady near $74.00 as risks of supply disruptions loomingCrude Oil prices keep trading near their highest levels since January, with the barrel of WTI trading at the $74.00 area at the moment of writing.
Author  FXStreet
Yesterday 09: 52
Crude Oil prices keep trading near their highest levels since January, with the barrel of WTI trading at the $74.00 area at the moment of writing.
placeholder
USD/JPY Price Forecast: The pair remains bullish with 146.15 on sightThe US Dollar keeps trading in a bullish trend with higher highs and higher lows against a weaker Yen and is on track to close the week 0.8% higher, despite the strong Japanese inflation figures seen earlier today.
Author  FXStreet
Yesterday 09: 49
The US Dollar keeps trading in a bullish trend with higher highs and higher lows against a weaker Yen and is on track to close the week 0.8% higher, despite the strong Japanese inflation figures seen earlier today.
placeholder
US Dollar Index retraces to near 98.60 as Trump reassesses decision to strike IranThe US Dollar (USD) retraces from its weekly high as comments from the White House that it will decide on its plans of striking Iran in the next two weeks have provided interim relief to investors.
Author  FXStreet
Yesterday 09: 40
The US Dollar (USD) retraces from its weekly high as comments from the White House that it will decide on its plans of striking Iran in the next two weeks have provided interim relief to investors.
goTop
quote