Odaily星球日报讯 ZachXBT 发文更新 Bybit 被盗资金动向表示，几分钟前，Lazarus Group 将一个与 BingX 黑客攻击相关的地址进行关联，该地址现在将 Bybit、BingX 和 Phemex 的被盗资金连接到链上。 重合地址：0xd555789b146256253cd4540da28dcff6e44f6e50 Bybit 黑客攻击交易：0x4a366130118d750715c2d35fdc07509cf943fcc988fa5e6d02211e3d5472796e BingX 黑客攻击交易：0x93424aa87731bb9b1d8cc1f708d2ac9f3faf914f368a00494d87cba3e7719e8c

Odaily星球日报讯 ZachXBT 发文更新 Bybit 被盗资金动向表示，几分钟前，Lazarus Group 将一个与 BingX 黑客攻击相关的地址进行关联，该地址现在将 Bybit、BingX 和 Phemex 的被盗资金连接到链上。重合地址：0xd555789b146256253cd4540da28dcff6e44f6e50Bybit 黑客攻击交易：0x4a366130118d750715c2d35fdc07509cf943fcc988fa5e6d02211e3d5472796eBingX 黑客攻击交易：0x93424aa87731bb9b1d8cc1f708d2ac9f3faf914f368a00494d87cba3e7719e8c

ZachXBT：Lazarus Group将BingX黑客攻击地址与Bybit和Phemex被盗资金地址关联

Odaily reported that ZachXBT published an update on the movement of the stolen funds from Bybit. A few minutes ago, the Lazarus Group associated an address related to the BingX hack, which now links the stolen funds from Bybit, BingX, and Phemex on-chain. Overlapping address: 0xd555789b146256253cd4540da28dcff6e44f6e50 Bybit hack transaction: 0x4a366130118d750715c2d35fdc07509cf943fcc988fa5e6d02211e3d5472796e BingX hack transaction: 0x93424aa87731bb9b1d8cc1f708d2ac9f3faf914f368a00494d87cba3e7719e8c

Odaily reported that ZachXBT published an update on the movement of the stolen funds from Bybit. A few minutes ago, the Lazarus Group associated an address related to the BingX hack, which now connects the stolen funds from Bybit, BingX, and Phemex on-chain. Overlapping address: 0xd555789b146256253cd4540da28dcff6e44f6e50
Bybit hack transaction: 0x4a366130118d750715c2d35fdc07509cf943fcc988fa5e6d02211e3d5472796e
BingX hack transaction: 0x93424aa87731bb9b1d8cc1f708d2ac9f3faf914f368a00494d87cba3e7719e8c

ZachXBT: Lazarus Group links BingX hacking addresses to Bybit and Phemex stolen funds addresses

Odaily reported that ZachXBT posted on his personal channel stating: "The Lazarus Group involved in the Bybit incident transferred 5000 ETH to a new address and laundered the funds through eXch (a centralized mixer), and then bridged the funds to Bitcoin via Chainflip. The transfer of 5000 ETH occurred on February 22, 2025 at 6:28:23 AM, with the TXN being 0xbf80907830e46317da2c1708a13a9f016e242f8a6db6e6b0706ea5f2328cb001; the final Bitcoin address through Chainflip is bc1qlu4a33zjspefa3tnq566xszcr0fvwz05ewhqfq."

ZachXBT: Bybit hackers have bridged 5,000 ETH to the BTC network through mixers and Chainflip

Odaily reported that ZachXBT posted again, stating that the Bybit attacker distributed 10,000 ETH to 39 addresses. The report once again reminds exchange and service providers to consider blacklisting and banning the related addresses.

ZachXBT: Bybit attacker distributed 10,000 ETH to 39 EVM addresses, and recommended relevant personnel to handle it

Odaily reports that ZachXBT posted on his personal Telegram channel that his sources confirm it's a security incident with Bybit. Additionally, ZachXBT warned relevant personnel at major exchanges to blacklist the following EVM addresses: 0x47666fab8bd0ac7003bce3f5c3585383f09486e2, 0xa4b2fd68593b6f34e51cb9edb66e71c1b4ab449e, 0x36ed3c0213565530c35115d93a80f9c04d94e4cb, 0x1542368a03ad1f03d96D51B414f4738961Cf4443. Previously, on-chain sleuth ZachXBT posted on his personal Telegram channel that he had detected suspicious outflows of over $1.46 billion from Bybit, and would provide updates on the related addresses, which is 0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2. mETH & stETH are currently being swapped for ETH on DEX.