{"id":23020,"date":"2025-04-21T14:31:38","date_gmt":"2025-04-21T14:31:38","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=23020"},"modified":"2025-04-21T14:31:38","modified_gmt":"2025-04-21T14:31:38","slug":"only-3-84-of-1-4-billion-in-hacked-crypto-frozen-bybit-ceo-reveals","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=23020","title":{"rendered":"Only 3.84% Of $1.4 Billion In Hacked Crypto Frozen, ByBit CEO Reveals"},"content":{"rendered":"
\n

Crypto exchange ByBit has disclosed that scarcely one\u2011twentieth of the assets siphoned off in the sprawling $1.4 billion exploit orchestrated by North Korea\u2019s Lazarus Group are currently locked down. \u201cOnly 3.84 percent of the hacked funds are frozen,\u201d chief executive officer (CEO) Ben Zhou revealed via X, warning that the remainder \u201ccontinues to circulate in an ever\u2011thickening web of mixers, cross\u2011chain swaps and over\u2011the\u2011counter desks.\u201d<\/p>\n

Frozen Crypto Funds? Barely<\/h2>\n

The exchange\u2019s internal forensic review pegs the original loss at roughly 500,000 ETH, valued at $1.4 billion<\/a> at the time of theft. Of that total, 68.57% remains traceable, while 27.59% has gone dark\u2014a discrepancy Zhou attributes to \u201crapid fragmentation and deliberate chain\u2011hopping designed to frustrate surveillance.\u201d<\/p>\n

According to a ByBit executive summary dated 21 April, the untraceable tranche first passed through the Wasabi mixer, with smaller fragments later funneled into CryptoMixer, Tornado Cash<\/a> and Railgun. The laundered coins then traversed multiple cross\u2011chain bridges and swap routers\u2014Thorchain, eXch, Lombard, LiFi, Stargate and SunSwap\u2014before disappearing again inside P2P and OTC fiat ramps. \u201cEach hop trims visibility by a few more basis points,\u201d Zhou said, noting that investigators now confront \u201ca labyrinth of tens of thousands of microscopic wallets.\u201d<\/p>\n

On the Ethereum side, the firm tracked 432,748 ETH\u2014about 84.45% of the original stack\u2014into BTC via Thorchain. Roughly 67.25% of the initial ETH amount, or 342,975 coins, has already become 10,003 BTC, scattered across 35,772 wallets that average 0.28 BTC each. A residual 5,991 ETH, representing 1.17% of the haul, still sits natively on Ethereum at 12,490 addresses with an average balance below half an ether.<\/p>\n

The Bitcoin trail shows a mirror image of the laundering cycle. ByBit found that 944 BTC, or 6.34% of the converted stash, landed in Wasabi. Another 531 BTC\u2014equivalent to 18,206 ETH, or 3.57% \u2014has already been bridged back to Ethereum via Thorchain, underscoring the attackers\u2019 preference for swing\u2011trading between chains to exploit analytic blind spots.<\/p>\n

Investigators working with the crowd\u2011sourced platform Lazarusbounty.com have attempted to map the dispersion. In the past 60 days the site logged 5,443 bounty submissions, yet only 70 were deemed valid. A notice on the portal pleads for greater public participation: \u201cWe welcome more reports; we need more bounty hunters that can decode mixers as we need a lot of help there down the road.\u201d<\/p>\n

Despite the daunting numbers, Zhou insists the window for clawbacks has not yet closed. \u201cRoughly two\u2011thirds of the cryptocurrency is still visible on\u2011chain, albeit highly fragmented,\u201d he said, adding that further freezes will depend on \u201ccoordinated pressure across centralized exchanges, cross\u2011chain liquidity hubs and even fiat gateways.\u201d<\/p>\n

For now, however, the lion\u2019s share of the Lazarus<\/a>\u2011linked war chest remains in motion\u2014swapping, bridging and tumbling through the decentralized undergrowth\u2014while the fraction frozen stands at a mere 3.84 percent, a statistic that starkly illustrates how porous the global enforcement perimeter remains against state\u2011sponsored crypto theft.<\/p>\n

At press time, ETH traded at $1,631.<\/p>\n

\"Ethereum<\/div>\n","protected":false},"excerpt":{"rendered":"

Crypto exchange ByBit has disclosed that scarcely one\u2011twentieth of the assets siphoned off in the sprawling $1.4 billion exploit orchestrated by North Korea\u2019s Lazarus Group are currently locked down. \u201cOnly 3.84 percent of the hacked funds are frozen,\u201d chief executive officer (CEO) Ben Zhou revealed via X, warning that the remainder \u201ccontinues to circulate in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-23020","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/23020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23020"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/23020\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=23020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=23020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}