Bitcoin

Proxy

THORChain

Bybit CEO Ben Zhou confirmed that $280 million of the $1.4 billion stolen from the exchange has been laundered and is no longer traceable. Still, about $1.07 billion remains trackable, allowing investigators to continue their efforts to recover the funds.
On March 4, Zhou provided an update on the movement of 500,000 Ether (<a href="https://cointelegraph.com/ethereum-price" rel="noopener noreferrer nofollow" target="null">ETH</a>) stolen in the February hack and the ongoing efforts to stop the bad actors from <a href="https://cointelegraph.com/news/bybit-exchange-hacked" rel="noopener noreferrer nofollow" target="_self">running away with the loot</a>.
“Total hacked funds of USD 1.4bn around 500k ETH, 77% are still traceable, 20% has gone dark, 3% have been frozen,” Zhou said.
By saying “gone dark,” Zhou indicated that 20% of the stolen funds had been successfully mixed, laundered or sent to platforms that obscure transactions by the North Korean hackers.
<h2 id="recovering-stolen-assets-in-parts">Recovering stolen assets in parts</h2>
Investigators have so far helped freeze $42 million, equivalent to 3% of the stolen funds.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2025-03/01956006-45d2-71fe-804c-2c1d266fa7a9" title="" alt="Bybit CEO: 20% of $1.4B stolen funds ‘gone dark’">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/benbybit/status/1896798476945744010" rel="noopener noreferrer nofollow" target="null">Ben Zhou</a>
 </figcaption>
</figure>
The hackers converted about $1 billion of the stolen funds — 417,348 ETH — to Bitcoin (<a href="https://cointelegraph.com/bitcoin-price" rel="noopener noreferrer nofollow" target="null">BTC</a>) and spread it across 6,954 cryptocurrency wallets with an average holding of 1.71 BTC per wallet. This fragmentation makes further tracking and recovery more difficult.
Related: <a href="https://cointelegraph.com/news/bybit-hackers-resume-money-laundering-activities-moving-62200-eth" rel="noopener noreferrer nofollow" target="null">Bybit hackers resume laundering activities, moving another 62,200 ETH</a>
According to Zhou, the next one to two weeks will be critical for freezing additional funds before the attackers attempt to cash out through crypto exchanges, over-the-counter (OTC) platforms and peer-to-peer (P2P) transactions.
<h2 id="bybit-hackers-intend-to-keep-the-stolen-funds">Bybit hackers intend to keep the stolen funds</h2>
According to Zhou, the Bybit hackers primarily used the decentralized exchange THORChain to cash out ETH and BTC. Other platforms like ExCH and OKX Web3 Proxy were also used to move some of the funds.
He also said that $65 million worth of ETH can be recovered but will need support from the OKX Wallet team. Additionally, 11 bounty hunters have been rewarded a total of $2.1 million for their efforts in freezing stolen funds.
On Feb. 25, blockchain analytics firm Elliptic identified <a href="https://cointelegraph.com/news/north-korean-hackers-crypto-wallets-bybit-hack" rel="noopener noreferrer nofollow" target="null">more than 11,000 wallets linked to the Bybit hackers</a>.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2025-03/01956006-4f42-72fe-94c0-02f53bdb7a56" title="" alt="Bybit CEO: 20% of $1.4B stolen funds ‘gone dark’">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/benbybit/status/1894593959739232785" rel="noopener noreferrer nofollow" target="null">Ben Zhou</a>
 </figcaption>
</figure>
Additionally, Bybit engaged Web3 security firm ZeroShadow for blockchain forensics on Feb. 25. The security firm is tasked with tracing and freezing the stolen Bybit funds and maximizing the recovery.
Magazine: <a href="https://cointelegraph.com/magazine/elon-musk-proposal-to-run-government-on-usa-chain-has-some-issues/" rel="noopener noreferrer nofollow" target="null">Elon Musk’s plan to run government on blockchain faces uphill battle</a>

Bybit CEO: 20% of $1.4B stolen funds ‘gone dark’

Table of Contents

Cointelegraph

Other articles published on Mar 4, 2025

Join our free newsletter for daily crypto updates!