Significant Breakthrough in Cryptocurrency Laundering Investigation
Blockchain investigator ZachXBT has reported a significant breakthrough in tracking the flow of stolen cryptocurrency, revealing a Chinese organized crime group allegedly laundered over $1 billion on behalf of North Korea’s Lazarus Group. This revelation comes in the wake of the massive $1.5 billion hack on Bybit, one of the top cryptocurrency exchanges, which occurred in early 2025.
Infiltration and Investigation
Within days of the incident, ZachXBT infiltrated the laundering operation by masquerading as a legitimate customer. By investing $349,700 in stablecoins and intentionally incurring losses to gain credibility, he connected with an operator identified as “Jimmy Green.”
Through this covert operation, ZachXBT traced more than $12 million in funds linked to Bybit. Following his investigation, Tether, a prominent stablecoin issuer, acted to freeze $442,000 associated with these illicit transactions.
Complex Dynamics of Cryptocurrency Laundering
This investigation sheds light on the complex dynamics of cryptocurrency laundering, particularly as it pertains to North Korean hackers who have been implicated in the theft of approximately $6.75 billion in digital currencies, as per Chainalysis data. Known for their sophisticated laundering techniques, these hackers typically employ a multi-step process involving chain-hopping and token swaps across a range of decentralized exchanges and services, effectively masking the traceable path of the pilfered funds.
ZachXBT notes that Chinese intermediaries have been crucial to this laundering strategy. In a notable case from 2020, authorities in the U.S. charged two individuals from China with laundering over $100 million that had been stolen by North Korean attackers from a cryptocurrency platform in 2018. Further actions by the U.S. Department of the Treasury in 2023 saw sanctions placed on two traders – one based in Hong Kong and another in mainland China – who facilitated the DPRK’s efforts to convert and cleanse stolen cryptocurrency, circumventing international financial regulations.
Recent Developments and Ongoing Challenges
In addition to the Bybit funds, ZachXBT has noted that these Chinese actors were involved in laundering activities related to other substantial hacks, including a recent $387.5 million breach of the Bitget exchange. On September 28, he highlighted that those laundering on behalf of North Korean hackers were actively soliciting assistance in public forums such as Discord and Telegram, showcasing the audacity and organizational structure of these operations.
Furthermore, one of the suspects had previously been implicated in laundering funds from another significant exploit involving Kelp DAO worth $292 million which took place earlier in April.
This account signifies not just the ongoing challenges in combating cryptocurrency-linked crime but also the increasing intersection of international criminal networks with state-sponsored cyber threats. As investigations advance, the implications for global financial security remain profound.
