ZachXBT Tracks Bybit Theft Funds After Infiltrating Crime Group

Blockchain investigator ZachXBT infiltrated a Chinese organized crime group by posing as a customer. His efforts helped freeze funds linked to the February 2025 theft from crypto exchange Bybit and tracked suspected money laundering activity. ZachXBT estimated the group handled over $1 billion in illicit funds. He also identified on-chain activity potentially tied to the Lazarus Group, also known as TraderTraitor, a North Korean-linked hacking collective.

Following the Bybit attack, ZachXBT noticed at least 15 accounts in Telegram and Discord groups publicly seeking help with orders directly connected to the stolen funds. One individual using the alias “Jimmy Green” became a key focus of his investigation. ZachXBT’s work highlights the ongoing challenge of tracking and recovering funds stolen in high-profile crypto exchange hacks.