Reported by The Block: Bybit CEO Ben Zhou reported that 86% of the $1.5 billion in stolen funds, about 440,091 ETH, were converted to 12,836 BTC.
The converted funds have been distributed across 9,117 wallets, each containing an average of 1.41 BTC.
The funds are being laundered by the North Korean Lazarus Group using Bitcoin mixers and peer-to-peer vendors.
Bybit hackers are sending stolen bitcoin to mixers and peer-to-peer vendors following the $1.5 billion cryptocurrency hack at the exchange in February 2025.
Amid the ongoing recovery efforts, co-founder and CEO Ben Zhou reported that hackers converted 86% of the stolen funds, amounting to 440,091 ETH (about $1.23 billion), into 12,836
BTC +2.09%
.
Previously, the hackers had transferred a significant portion of the stolen ether into bitcoin, primarily through the cross-chain liquidity protocol THORChain.
In an update, Zhou said that 12,836 BTC were distributed across 9,117 wallets, with an average amount of 1.41 BTC per wallet. He added that the hackers, believed to be the North Korean Lazarus Group, are using Bitcoin mixers such as Wasabi, CryptoMixer, and Railgun to launder the stolen crypto.
Specifically, Zhou said 193 BTC ($16 million) were directed primarily through the Wasabi mixer before being funneled to various peer-to-peer vendors. In crypto, peer-to-peer (P2P) transactions occur directly between individuals without intermediaries. P2P vendors enable these exchanges through online platforms or informal networks.
Wasabi is a Bitcoin mixing service that uses a technique called CoinJoin, which obfuscates Bitcoin transactions for privacy.
"We believe this trend will grow as more funds will go through mixers. Decoding mixer transactions is the no. 1 challenge we face now," Zhou commented on X.
According to Bybit's latest data, 88.8% of these funds remain traceable, 7.6% have become untraceable, and 3.5% have been successfully frozen.
Bybit
