North Korean Hackers Launder $300 Million from Massive Crypto Heist

Thu Mar 13 2025 09:39:41 GMT+0200 (Eastern European Standard Time)
North Korean Hackers Launder $300 Million from Massive Crypto Heist

In a record-breaking breach, North Korean hackers have successfully washed hundreds of millions from the ByBit crypto exchange’s $1.5 billion theft.


Recent investigations highlighted the sophisticated methods used by the Lazarus Group in achieving their cybercrime goals, casting a shadow over global cryptocurrency security.

North Korean hackers, linked to the notorious Lazarus Group, have reportedly laundered at least $300 million from a staggering $1.5 billion heist targeting crypto exchange ByBit. This breach, which took place a mere two weeks ago, is not just a testament to the hackers’ boldness but also to their expertise in manipulating the cryptocurrency landscape.

Cybersecurity experts indicate that the Lazarus Group is operating around the clock to obfuscate the money trail and convert the stolen digital tokens into cash, possibly funding North Korea's military ambitions. Dr. Tom Robinson, co-founder of the blockchain analysis firm Elliptic, underscored the sophisticated methods employed by these hackers, noting that they are adept at laundering cryptocurrency. “They have developed a proficient industry for these cybercrimes without concern for public perception,” he stated.

ByBit reported that nearly 20% of the stolen funds have gone "dark," indicating a bleak recovery outlook. Experts and law enforcement agencies worldwide attribute these hacks to North Korea's goal of financing its military and nuclear programs. On February 21, hackers compromised one of ByBit’s suppliers, redirecting the transfer of 401,000 Ethereum tokens to their wallets instead of ByBit’s registered ones.

Despite assurances from ByBit CEO Ben Zhou that customer assets remain secure, the exchange has agency difficulties in reclaiming the stolen assets. To combat this, ByBit launched its Lazarus Bounty program, incentivizing the public to report on any movements of the hacked funds, hoping to freeze them where possible.

While over $4 million has already been distributed to informants who identified $40 million of the stolen money, recovery challenges remain significant due to the anonymous nature of blockchain transactions and varying levels of cooperation from other exchanges. Notably, eXch, another crypto exchange, has faced scrutiny for allegedly facilitating the laundering of over $90 million in stolen funds.

The Lazarus Group’s recent activity reveals a shift from traditional bank-targeting to the more vulnerable crypto sector, which lacks robust protective measures. Previous hacks attributed to North Korea include substantial breaches on exchanges like UpBit, KuCoin, and others, emphasizing the ongoing cybersecurity risk posed by these state-sponsored cybercriminals.

While the U.S. government has included individuals from the Lazarus Group on its Cyber Most Wanted list, the prospects for bringing these alleged criminals to justice remain dim, particularly given North Korea's isolated status.

Follow us

© 2024 SwissX REDD UK ltd. All Rights Reserved.