ZachXBT infiltrates Chinese laundering crew tied to Bybit and Bitget thefts

HACK OR EXPLOITZachXBT infiltrates Chineselaundering crew tied to Bybitand Bitget thefts45IMPORTANCECLOSED3NEWS MEDIA3PIECESOct 5, 2026 15:48blockboard.net

ZachXBT said he spent months posing as a customer inside a Chinese laundering network that had moved more than $1 billion in stolen crypto for North Korea’s Lazarus Group. The information he gathered was used in the Bybit hack investigation, and proceeds from the February 2025 breach were frozen.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

What this rests on

Claim by claim, with its source
✓
ZachXBT said he spent months inside a Chinese money-laundering syndicate while posing as a paying client.
ZachXBT infiltrates Chinese laundering crew tied to Bybit and Bitget thefts
✓
He said the syndicate had moved more than $1 billion in stolen funds for North Korea’s Lazarus Group.
ZachXBT Links $1B+ Crypto Laundering Network to Lazarus Group in Bybit Investiga
✓
The intelligence he gathered was used in the investigation into the Bybit exchange hack, and a substantial portion of the stolen funds was frozen.
ZachXBT Links $1B+ Crypto Laundering Network to Lazarus Group in Bybit Investiga
✓
He said the information he found helped trace funds from the $1.5 billion Bybit hack.
Chinese crime network laundered over $1B for Lazarus: ZachXBT

Market reaction

BT Bitcoin it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
-1.43 % before publication
+0.43 % after
$85,342price at publication
12series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 5 17:20
+1 h 50 m
Oct 5 19:09
Crypto Economy context
Its angle: infrastructure, sophisticated, international
+8 h 27 m
Oct 6 01:47
Cointelegraph echo
No new facts: information, customer, gaining; with quotes

Thefts of a similar size

WhenWhat happenedFigure
7.0 years ago WOTOKEN · Ponzi incident $1.1B
9.2 years ago BTC-e · Unknown incident $990M
10.2 years ago Bitfinex · Wallet stolen incident $900M
7.5 years ago Bitfinex · Scam incident $851M
6.3 years ago BitClub · Ponzi incident $722M

4200 incidents stored · 8 were as large as this one or larger ($1B)