Lazarus Group moves funds to multiple wallets as Bybit offers bounty

The Lazarus Group moved 10,000 Ether (ETH), valued at $27 million, to a pockets labeled Bybit Exploiter 54 on Feb. 22 to launder the funds, in line with onchain analytics agency Lookonchain.

Onchain data from the agency additionally reveals that the malicious actors, identified by ZackXBT, at present maintain 489,395 ETH, valued at over $1.3 billion, and 15,000 Mantle Restaked ETH (cmETH) in 53 further wallets.

Etherscan additionally reveals that the hacking group has been actively shifting funds between the wallets, with over 83 transactions between wallets over the previous eight hours.

In accordance with the block explorer, the newest transaction from Bybit Exploiter 54 was despatched to a pockets ending in “CE9” at 01:23:47 PM UTC on Feb. 22 and contained roughly 66 ETH, valued at $182,831.

The $1.4 billion Bybit hack, labeled because the single largest crypto hack in history, shook crypto markets — inflicting ETH’s value to say no by roughly 8% in a single day and a corresponding dip in altcoin costs.

Associated: Bybit exploit exposes security flaws in centralized crypto exchanges

Restoration of the stolen funds begins

Mudit Gupta, the chief info safety officer at Polygon, said that roughly $43 million in stolen funds from the hack have already been recovered with assist from the Mantle, SEAL, and mETH groups.

Tether CEO Paolo Ardoino added that the stablecoin issuer froze 181,000 USDt (USDT) linked to the hack on Feb. 22.

Bybit additionally introduced a bounty program awarding as much as 10% of the stolen funds, valued at as much as $140 million, to contributors who assist get better the stolen funds from the notorious hacking group.

The alternate garnered widespread praise from business executives for its communication within the wake of the safety incident and for keeping withdrawal requests open for purchasers throughout a disaster.

Ben Zhou, CEO of the Bybit alternate, introduced that withdrawals have returned to a standard tempo after the platform processed all pending withdrawals that created congestion on the alternate following the hack.

The CEO additionally reassured prospects that they might withdraw any quantity from the alternate with out time delays or points in a current social media post.

Journal: Weird ‘null address’ iVest hack, millions of PCs still vulnerable to ‘Sinkclose’ malware: Crypto-Sec