Odaily星球日报讯 链上侦探 ZachXBT 于个人频道发文披露，eXch（中心化混币器）团队在帮助 Bybit 安全事件黑客团队 Lazarus Group 清洗 3500 万美元之后，错将 34 枚 ETH（价值 9.6 万美元）发送至另一交易所热钱包地址。

Odaily星球日报讯 链上侦探 ZachXBT 于个人频道发文披露，eXch（中心化混币器）团队在帮助 Bybit 安全事件黑客团队 Lazarus Group 清洗 3500 万美元之后，错将 34 枚 ETH（价值 9.6 万美元）发送至另一交易所热钱包地址。

ZachXBT：Lazarus Group用于洗钱的中心化混币器eXch团队错将34枚ETH发送至某交易所热钱包

Odaily reported that on-chain detective ZachXBT disclosed in his personal channel that the eXch (centralized mixer) team, after helping the Lazarus Group (the hacker team behind the Bybit security incident) launder $35 million, mistakenly sent 34 ETH (worth $96,000) to another exchange's hot wallet address.

ZachXBT: The eXch team, a centralized coin mixer used by Lazarus Group for money laundering, mistakenly sent 34 ETH to an exchange hot wallet

Odaily reported that ZachXBT published an update on the movement of the stolen funds from Bybit. A few minutes ago, the Lazarus Group associated an address related to the BingX hack, which now links the stolen funds from Bybit, BingX, and Phemex on-chain. Overlapping address: 0xd555789b146256253cd4540da28dcff6e44f6e50 Bybit hack transaction: 0x4a366130118d750715c2d35fdc07509cf943fcc988fa5e6d02211e3d5472796e BingX hack transaction: 0x93424aa87731bb9b1d8cc1f708d2ac9f3faf914f368a00494d87cba3e7719e8c

ZachXBT: Lazarus Group links BingX hacking addresses to Bybit and Phemex stolen funds addresses

Hacker organizations, especially the Lazarus Group and other state-level hackers, are continuously upgrading their attack methods.

Author: Slow Mist Security Team

Background
On the evening of February 21, 2025, Beijing time, according to the on-chain detective ZachXBT, a large-scale capital outflow occurred on the Bybit platform. This incident resulted in the theft of over $1.46 Bit, making it the largest cryptocurrency theft incident in recent years in terms of loss amount.

On-chain Tracking Analysis
After the incident occurred, the Slow Mist Security Team immediately issued a security alert and conducted a tracking analysis of the stolen assets:
According to Slow...

Analyzing the hacker methods and questions behind the theft of nearly $1.5 billion from Bybit

Odaily reports that ZachXBT posted on his personal Telegram channel that his sources confirm it's a security incident with Bybit. Additionally, ZachXBT warned relevant personnel at major exchanges to blacklist the following EVM addresses: 0x47666fab8bd0ac7003bce3f5c3585383f09486e2, 0xa4b2fd68593b6f34e51cb9edb66e71c1b4ab449e, 0x36ed3c0213565530c35115d93a80f9c04d94e4cb, 0x1542368a03ad1f03d96D51B414f4738961Cf4443. Previously, on-chain sleuth ZachXBT posted on his personal Telegram channel that he had detected suspicious outflows of over $1.46 billion from Bybit, and would provide updates on the related addresses, which is 0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2. mETH & stETH are currently being swapped for ETH on DEX.

ZachXBT: The eXch team, a centralized coin mixer used by Lazarus Group for money laundering, mistakenly sent 34 ETH to an exchange hot wallet

Download app to participate in rewarding events