Tuesday, February 25, 2025

Hack tracking

Muyao Shen follows the money from the Bybit hack and wonders where it's all going to end up. Hackers made away with almost $1.5 billion in t
View in browser
Bloomberg

Bloomberg Crypto is now exclusively for Bloomberg.com subscribers. As a loyal reader, we'll keep sending it to you for a limited time. If you'd like to continue receiving Bloomberg Crypto, and gain unlimited digital access to all of Bloomberg.com, we invite you to subscribe now at the special rate of $129 for your first year (usually $299).

Muyao Shen follows the money from the Bybit hack and wonders where it's all going to end up. 

Hot money

Hackers made away with almost $1.5 billion in tokens from the Bybit exchange, the biggest theft in the history crypto. So what exactly are they going to do with it?

The answer isn't as simple as it once was. The crypto market of today is far removed from its early years, when know-your-customer requirements were rare. Now, most crypto exchanges have established compliance teams and closely monitor criminal activity on the blockchain. Venture capital-backed blockchain intelligence firms like Chainalysis work with global law enforcement to track and seize criminal proceeds in crypto. There are also grassroots groups like SEAL 911 constantly analyzing blockchain data,  including tracking the flow of funds stolen by hackers.

So how will these hackers — suspected by analysts to be North Korea's Lazarus Group — launder the funds without getting caught? 

Blockchain sleuths say they have found some answers. ZachXBT, a pseudonymous investigator, disclosed on Telegram that an entity which received stolen funds from the Bybit hackers has launched and traded memecoins on the Pump.Fun platform. ZachXBT also pointed out that the hackers have been using eXch, a centralized crypto mixer, to launder some of the stolen funds. As of Tuesday, the majority of the stolen funds remained in Ether and were being swapped into new wallets, according to blockchain data firm Nansen.

In a normal environment, one might assume that any platforms receiving stolen cryptocurrencies would immediately freeze the funds. Yet this is crypto, after all, so it's more complicated than that. Many decentralized projects are, at least in theory, governed by community members or decentralized autonomous organizations that vote on major changes. For example, Chainflip, a project that allows asset swaps between different blockchains, was only able to move ahead with an upgrade to block the funds from Bybit's hackers after reaching a consensus to prevent illicit flows.

Even on centralized platforms controlled by a small group of people, freezing suspected stolen funds isn't an automatic response. Crypto mixer eXch's team decided not to collaborate with Bybit when approached about the alleged stolen tokens flowing through the mixer. The eXch team disputed ZachXBT's analysis, while denying it laundered money for the Lazarus Group. eXch did not reply to a request for comment.

To further complicate matters, an individual named Johann from eXch said that the "insignificant" portion of the Bybit tokens that went through the mixer would be "donated to various open-sourced initiatives dedicated to privacy and security both inside and outside crypto space."

So eXch essentially said that because the money went to its platform, it has the right to make decisions on what to do with it. And its stance is unlikely to be an isolated case, given how autonomy is at the center of the ethos of the whole industry.

Counting it out

$504 million
The amount of money that crypto exchange OKX will pay after pleading guilty to processing more than $1 trillion in transactions by US customers without a license.  

Hearing them out

"The Bybit hack was the latest in a string of events, such as questionable memecoin launches, that have brought back unhappy memories for crypto market participants."
Caroline Mauron
Co-founder, Orbit Markets
Describing the state of affairs in crypto markets as Bitcoin drops below $90,000.

What we're reading (and writing)

What we're watching

Ledger CEO Pascal Gauthier discusses concerns for security and how crypto should be stored following the Bybit hack. He speaks with Sonali Basak and Tim Stenovec on Bloomberg Crypto.

More from Bloomberg

  • Markets Daily for what's moving in stocks, bonds, FX and commodities
  • Tech In Depth for analysis and scoops about the business of technology
  • Cyber Bulletin for coverage of the shadow world of hackers and cyber-espionage
  • Game On for diving deep inside the video game business

You have exclusive access to other subscriber-only newsletters. Explore all newsletters here to get most out of your Bloomberg subscription.

Like getting this newsletter? There's more where that came from. Browse all our weekly and daily emails to get even more insights from your Bloomberg.com subscription.

Before it's here, it's on the Bloomberg Terminal. Find out more about how the Terminal delivers information and analysis that financial professionals can't find anywhere else. Learn more.

Want to sponsor this newsletter? Get in touch here.

You received this message because you are subscribed to Bloomberg's Bloomberg Crypto newsletter. If a friend forwarded you this message, sign up here to get it in your inbox.
Unsubscribe
Bloomberg.com
Contact Us
Bloomberg L.P.
731 Lexington Avenue,
New York, NY 10022
Ads Powered By Liveintent Ad Choices

No comments:

Post a Comment

Power Trends+: Look Here In Times of Uncertainty

Using our Quantum Score and trustworthy data to quickly analyze stocks   February 25, 2025 Publisher’s Note:...