Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DeFi Safety · Fact checked

ZachXBT Links $1B+ Crypto Laundering Network to Lazarus Group in Bybit Investigation

This Monday, ZachXBT revealed having infiltrated a criminal syndicate that laundered over $1 billion in crypto assets for North Korea’s Lazarus Group.

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

This Monday, ZachXBT revealed having infiltrated a criminal syndicate that laundered over $1 billion in crypto assets for North Korea’s Lazarus Group. The uncovered intelligence was integrated directly into the ongoing investigation regarding the Bybit exchange hack, enabling authorities to intervene and successfully freeze a substantial portion of the stolen funds. 1/ How I infiltrated …

Reported details

  • ZachXBT Infiltrates Lazarus Group’s Bybit Launderers    cyberkendra.com
  • ZachXBT Infiltrates Lazarus Group-Linked Crypto Laundering Network After $1.5 Billion Bybit Hack    CyberSecurityNews
  • His October 5 disclosure describes 2025 trades and private chats that he says helped trace Bybit funds and secure a 442,000 USDT freeze.

Why this matters

ZachXBT Links lands in the regulatory track rather than the market-structure track: the open question for tokenized-asset desks is which rule text follows, and whether it changes who may issue, hold, or redeem a tokenized instrument. Nothing about eligibility, custody, or settlement changes until a dated rule says so.

Evidence boundary

The scope is limited to what the linked reports state, and where two of them diverge both positions are recorded without either being picked in advance.

What to verify

Before acting on ZachXBT Links, read the dated rule text itself rather than a summary of it, and note which agency wrote it and whether the comment period is still open.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources