Over $380M Worth of Crypto Stolen During Bybit's $1.4B Hack Has Gone Dark
The untraceable funds primarily flowed into mixers then through bridges to P2P and OTC platforms, Zhou said.

What to know:
- Bybit's CEO announced that 27.95% of the $1.4 billion lost in a hack by the North Korean Lazarus Group is untraceable.
- The stolen funds were moved through mixers and cross-chain swaps to obscure their trail.
- Of the hacked funds, 84.45% were converted from ether to bitcoin, with a significant portion distributed across thousands of wallets.
Cryptocurrency exchange Bybit's CEO Ben Zhou said that 27.95% of the funds lost in the $1.4 billion exploit engineered by the North Korean Lazarus Group have gone dark or become untraceable.
"Total hacked funds of USD 1.4bn around 500k ETH. 68.57% remain traceable, 27.59% have gone dark, 3.84% have been frozen. The untraceable funds primarily flowed into mixers then through bridges to P2P and OTC platforms," Zhou said in an executive summary published on X on Monday.
The untraceable funds were moved into mixers before being transferred through bridges to P2P (peer-to-peer) and OTC (over-the-counter) platforms, the post explained, mentioning the use of Wasabi, a crypto mixer, to wash off a certain amount of BTC, following which a portion of these funds entered into other mixers, including Railgun, Tornado Cash and CryptoMixer.
The malicious entity then executed multiple cross-chain swaps through Thorchain, eXch, Lombard, LiFi, Stargate and SunSwap, with the final stage involving the conversion of these illicit funds into more liquid assets.
The North Korea-linked Lazarus Group hacked Bybit in February, draining 500,000 ether
Forensics reveal that of the hacked funds, a total of 432,748 ETH, representing 84.45%, has been transferred from ether to bitcoin via Thorchain. Notably, 67.25% of these funds, amounting to 342,975 ETH (around $960.33 million), has been converted into 10,003 BTC and distributed across 35,772 wallets with an average of 0.28 BTC per wallet.
Further, 1.17% of the funds, or 5,991 ETH (approximately $16.77 million), remains on the Ethereum blockchain, stashed across 12,490 wallets.
Lastly, the Lazarus Bounty initiative has received 5,443 bounty reports in two months, of which, 70 have been deemed valid. Zhou said the exchange needs "more bounty hunters that can decode mixers as we need a lot of help there down the road."
Más para ti
Protocol Research: GoPlus Security

Lo que debes saber:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
Más para ti
Japan’s Higher Rates Puts Bitcoin in the Crosshairs of a Yen Carry Unwind

A stronger yen typically coincides with de-risking across macro portfolios, and that dynamic could tighten liquidity conditions that recently helped bitcoin rebound from November’s lows.
Lo que debes saber:
- The Bank of Japan is expected to raise interest rates to 0.75% at its December meeting, the highest since 1995, affecting global markets including cryptocurrencies.
- A stronger yen could lead to de-risking in macro portfolios, impacting liquidity conditions that have supported bitcoin's recent recovery.
- Governor Kazuo Ueda indicated a high probability of a rate hike, with officials prepared for further tightening if their economic outlook supports it.










