logo

North Koreans finish initial laundering stage after more than $1 billion stolen from Bybit

ID: 8ecbc55e-21da-52a9-9a42-98bd47fac865

STIX ID: report--8ecbc55e-21da-52a9-9a42-98bd47fac865

Feed Name: The Record from Recorded Future News

Threat Score
90/100

Date Published: 2025-03-04

Date Updated: 2026-05-01

...
...

Recorded Future reports that a North Korean-linked APT (TraderTraitor/Lazarus) stole approximately $1.4 billion from crypto exchange Bybit and has begun rapidly laundering the funds using DeFi services, eXch (a non‑KYC service), mixers, and conversion to Bitcoin across thousands of addresses; the FBI has attributed the attack to the group, multiple blockchain security firms are tracing funds, and Bybit has launched recovery bounties while investigators warn of challenges posed by the scale, speed, and use of decentralized laundering infrastructure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.