27.59% of Bybit’s stolen funds are untraceable, while 68.57% are still traceable

BTC0.0₂₀

ETH0.0₂₀

HTX0.0₂₀

SOL0.0₂₀

BNB0.0₂₀

BTC0.0₂₀

ETH0.0₂₀

HTX0.0₂₀

SOL0.0₂₀

BNB0.0₂₀

27.59% of Bybit’s stolen funds are untraceable, while 68.57% are still traceable

04-21 03:30

Odaily News Bybit CEO Ben Zhou published an article announcing the latest executive summary of the March 20 fund theft incident: The total amount of stolen funds reached US$1.4 billion (about 500,000 ETH). Of this, 68.57% can still be traced, 27.59% can no longer be traced, and 3.84% has been frozen. Analysis of fund flows: Untraceable funds mainly flow to mixers, and then transfer to P2P and OTC trading platforms through cross-chain bridges. Recent observations show that the North Korean hacker group (DPRK) mainly uses Wasabi mixers. After being cleaned by Wasabi, a small amount of BTC is transferred to CryptoMixer, Tornado Cash and Railgun, and then cross-chain exchanges are carried out through platforms such as Thorchain, eXch, Lombard, LiFi, Stargate and SunSwap. Eventually enter the over-the-counter (OTC) or peer-to-peer (P2P) fiat currency exchange service. ETH destination: 432,748 ETH (84.45%, about $1.21 billion) were transferred from Ethereum to BTC through Thorchain. Of these, 67.25% (342,975 ETH, about $960 million) were converted into 10,003 BTC and distributed to 35,772 wallets (an average of 0.28 BTC per wallet); 1.17% (5,991 ETH, about $16.77 million) remained in 12,490 wallets on the Ethereum chain (an average of 0.48 ETH per wallet). BTC destination: 944 BTC (6.34%, about $90.62 million) entered the Wasabi mixer; 531 BTC (equivalent to 18,206 ETH, 3.57%) were transferred from the BTC chain back to Ethereum through Thorchain. 5,443 reports have been received in the past 60 days, of which 70 are valid, calling for more bounty hunters who can crack the mixer to join.

原文链接

最热快讯

2025-06-06 03:23:37

Hyperliquid’s 50x leveraged BTC short position turned from loss to profit, with a floating profit of over $600,000

Odaily News According to hypurrscan data, as the price of BTC fell this morning, Hyperliquid's 50x leverage whale turned its previous BTC short position into a profit, with a current floating profit of over $600,000. Its current position is 394 BTC short positions, with a total value of over $40 million, an average opening price of $103,772, and a liquidation price of $104,230.

2025-06-06 02:59:35

James Wynn wrote a long article about himself: He started playing with contracts in March, earned 8-digit profits from Meme coins, and lost 100 million in a week

Odaily News James Wynn posted on the X platform that he had just started to participate in perpetual contract trading in March this year. He had never traded seriously before, and at most he speculated on MEME coins (previously he was famous for discovering PEPE at a market value of 600,000 and making 8-digit profits). He once rolled over 3 million US dollars to 100 million in just one month, and then lost it all in one week on HyperLiquid. At that time, he was just playing around, but the on-chain data was public, and hundreds of thousands of people watched his account soar and plummet, so he just let himself go. Later, things gradually got out of control. He understood that this was essentially gambling. He wanted to recover his losses, but he was also afraid of being laughed at for "making 100 million and not being able to keep it", so he got deeper and deeper. The numbers jumping on the screen became a virtual game, and greed completely prevailed.

2025-06-06 02:55:00

BTC rebounded and broke through 102,000 USDT, and the 24-hour decline narrowed to 2.87%

Odaily News OKX market shows that BTC rebounded and broke through 102,000 USDT, and is now at 102,016.4 USDT, with the 24-hour decline narrowed to 2.87%. (This newsletter is generated by AI)

2025-06-06 02:52:44

SlowMist: Lazarus hackers are using a new stealing Trojan, OtterCookie, to target cryptographic practitioners

Odaily News The SlowMist security team has issued a warning that the North Korean Lazarus hacker group is using a new stealing Trojan called OtterCookie to launch targeted attacks against cryptocurrency and financial practitioners. Attack methods include faking high-paying job interviews/investor negotiations, using deepfake videos to impersonate recruiters, and disguising malware as "programming test questions" or "system update packages." Theft targets include login credentials saved by browsers, passwords and digital certificates in macOS keychains, and encrypted wallet information and private keys. SlowMist recommends being vigilant about unsolicited job/investment invitations, requiring multiple verifications for remote interviews, and never running executable files of unknown origin, especially so-called "technical test questions" or "update patches." Strengthen terminal protection (EDR), deploy antivirus software, and regularly check for abnormal processes.

2025-06-06 02:39:54

Abraxas Capital shorts mainstream currencies for hedging, with current floating profits exceeding $55 million

Odaily News According to OnchainLens monitoring, Abraxas Capital shorted BTC, ETH, SOL, HYPE and SUI through two wallets on the HyperLiquid platform, with current floating profits exceeding US$55 million during the market decline.

2025-06-06 02:31:24

TRUMP wallet official website linked to account X for the second time

Odaily News After the X account @TrumpWalletApp associated with the official website of TRUMP Wallet was frozen for the second time, it has now been unfrozen again. It is reported that the X account of TRUMP Wallet was frozen by the X platform on June 4, and was unfrozen and frozen again the next day. According to previous news, the official website of TRUMP Wallet showed that the wallet was jointly developed by Magic Eden and TRUMP Meme, but Donald Trump Jr., the eldest son of Trump, said that the Trump Group had no connection with this wallet product.

资讯热榜