FBI says North Korean Lazarus hackers were behind $1.5 billion Bybit crypto hack

North Korean flag with a hooded hacker
(Image credit: Shutterstock)

  • Bybit recently saw $1.5 billion stolen during a routine transfer
  • The FBI has now linked the Lazarus Group to the theft
  • The funds are currently being laundered to hamper tracing efforts

The Bybit cryptocurrency theft which saw almost $1.5 billion in funds stolen, has now been attributed to the notorious North Korean Lazarus Group by the FBI.

The Lazarus Group is also tracked as TraderTraitor and APT38, and in a statement, the FBI said, “TraderTraitor actors are proceeding rapidly and have converted some of the stolen assets to Bitcoin and other virtual assets dispersed across thousands of addresses on multiple blockchains. It is expected these assets will be further laundered and eventually converted to fiat currency.”

The funds were part of a regular transfer of Ethereum cryptocurrency between Bybit’s cold and hot wallet, but were redirected in transit to a Lazarus Group controlled blockchain address marking the largest cryptocurrency theft in history.

Article continues below

Largest crypto theft in history

The FBI also listed multiple Ethereum addresses linked to the theft, and requested that platforms who handle the transfer of cryptocurrency to block transactions from the listed accounts.

Bybit has also invited anyone with blockchain or cryptocurrency expertise to help track the stolen funds.

ZachXBT, a cryptocurrency theft and fraud investigator, observed the thieves transferring some of the stolen crypto to an Ethereum address previously used in several Lazarus Group operations.

Numerous other organizations in the blockchain industry have observed numerous transfers between North Korean controlled addresses in attempts to launder the funds and slow down tracing efforts.

The Lazarus Group has garnered quite a name for its crypto thefts that are believed to be a revenue generating method for the North Korean government.

North Korea does not disclose its GDP, but estimates place the country’s 2023 nominal GDP at USD$29.6 billion, meaning that the theft would account for around 5% of North Korea’s GDP in 2023.

You might also like

Benedict Collins
Senior Writer, Security

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.