BTC $86,015.00 ▼ 0.05% ETH $2,713.32 ▼ 0.01% BNB $783.57 ▼ 0.59% XRP $1.51 ▼ 0.69% SOL $119.98 ▼ 0.48% TRX $0.3359 ▼ 0.17% FIGR_HELOC $1.03 ZEC $1,365.91 ▲ 4.37% HYPE $93.51 ▲ 0.90% DOGE $0.0952 ▼ 0.94% LINK $14.03 ▼ 0.74% XMR $556.01 ▲ 1.67% ADA $0.2766 ▲ 1.33% WBT $85.94 ▲ 0.32%
73 Greed

ZachXBT spent $349,700 undercover to trace Bybit hack laundering ring

ZachXBT spent $349,700 undercover to trace Bybit hack laundering ring Image: Crypto Briefing
Image via Crypto Briefing.

Pseudonymous blockchain investigator ZachXBT fronted $349,700 USDC for an undercover operation targeting a Chinese organized crime group alleged to launder funds for North Korea's Lazarus Group. The operation launched in late February 2025, roughly a week after the $1.5 billion Bybit exchange hack. His work helped identify a wallet cluster tied to over $12 million in Bybit-linked funds, leading to a 442,000 USDT freeze. He shared his findings with law enforcement and private investigators during the active operation.

Key points

  1. ZachXBT fronted $349,700 USDC to infiltrate an alleged Chinese crypto laundering ring
  2. The ring is alleged to launder funds for North Korea's Lazarus Group
  3. The undercover operation launched shortly after the $1.5 billion Bybit exchange hack in February 2025
  4. His work identified a wallet cluster holding more than $12 million in Bybit-linked funds
  5. Solana addresses provided by his contact helped track cross-chain movements of stolen Bybit funds

Why it matters

The operation highlights the personal and operational risks investigators face when infiltrating illicit laundering networks, and shows stablecoin freezes remain a key tool for disrupting North Korea-linked crypto theft proceeds.

What's unclear

The start date of ZachXBT's undercover operation is reported as both late February 2025 and March 6 2025
It is unclear if the 442,000 USDT freeze is included in Tether's reported $19 million in total Bybit-related freezes

Price context · USDC

At publication
$1.0000
Now
$1.0000
Change since
+0.00%
7 days · dashed line = publication

Sources · 3 publishers

The Defiant Tier 1 First report
ZachXBT Says He Fronted $349,700 to Infiltrate Alleged Laundering Ring
Crypto Briefing Tier 2
ZachXBT fronted $349,700 to get inside an alleged Lazarus laundering ring
Blockonomi Tier 3
ZachXBT Went Undercover With $349,700 to Follow Stolen Bybit Crypto

Coverage timeline

  1. First reported by The Defiant
  2. Confirmed by Crypto Briefing
  3. CryptoVideos brief published
How this brief was made. Our system found this event in 3 independent publications, summarised two complete reports with AI and checked every number above against the source text. Sources are linked in full. Not financial advice. Report an error

Related briefs