Bybit Hacker Launders Entire $1.04 Billion Ethereum Haul

A hacker has successfully laundered 499,395 Ethereum , valued at approximately $1.04 billion, stolen from the cryptocurrency exchange Bybit on February 21, 2025. This incident marks one of the most significant security breaches in the cryptocurrency industry to date.

The Federal Bureau of Investigation has attributed the theft to North Korean-affiliated hacking groups, notably the Lazarus Group and TraderTraitor. These groups have been implicated in previous cyberattacks aimed at generating revenue for North Korea’s sanctioned economy.

The hacker employed sophisticated techniques to infiltrate Bybit’s security systems, executing a phishing scam that led to the unauthorized transfer of funds. The stolen assets included liquid-staked Ether , Mantle Staked ETH , and other ERC-20 tokens.

Following the theft, the hacker utilized decentralized platforms, primarily THORChain, to launder the stolen ETH. This method involved converting the assets into various cryptocurrencies, complicating efforts to trace and recover the funds.

Bybit’s CEO, Ben Zhou, reported that approximately 3% of the stolen funds have been intercepted and frozen, while 20% have become untraceable. The remaining 77% are still under investigation, with efforts ongoing to recover the assets.

The incident has raised concerns about the security measures employed by cryptocurrency exchanges. Experts highlight the need for enhanced security protocols to protect against increasingly sophisticated cyber threats.