ZachXBT infiltrated Chinese launderers working for North Korean Lazarus Group
Image: DecryptPseudonymous crypto investigator ZachXBT posed as a money laundering client to infiltrate a Chinese organized crime syndicate. The syndicate launders crypto for North Korea's Lazarus Group. ZachXBT fronted $349,700 of his own funds for the operation, losing 5% on each transaction. The intel gathered helped freeze funds tied to the 2025 $1.5 billion Bybit hack and the 2023 $100 million Poloniex hack.
Key points
- ZachXBT infiltrated a Chinese syndicate that launders crypto for North Korea's Lazarus Group.
- The gathered intel helped freeze funds linked to the 2025 $1.5 billion Bybit hack.
Why it matters
The operation demonstrates undercover on-chain investigations can trace and disrupt crypto laundering networks tied to state-sponsored hacking groups. It also highlights independent investigators' role in supporting law enforcement freezes of stolen crypto.
What's unclear
The reports do not disclose whether any syndicate members have been identified or face legal action
Sources · 3 publishers
Decrypt
Tier 1
Crypto Sleuth ZachXBT Fronted $350K to Pose as a Client of Lazarus' Chinese Launderers
CryptoSlate
Tier 2
ZachXBT infiltrates $1B crypto syndicate to expose Lazarus Group
Coverage timeline
- First reported by Protos
- Confirmed by Decrypt
- CryptoVideos brief published
How this brief was made. Our system found this event in 3 independent publications, summarised two complete reports with AI and checked every number above against the source text. Sources are linked in full. Not financial advice. Report an error
