Crypto detective goes undercover in Chinese syndicate laundering $1 billion

In this news:

Key takeaways

  • Blockchain investigator ZachXBT went undercover to infiltrate a Chinese crime syndicate laundering over $1 billion.
  • The syndicate is linked to major incidents including the Bybit and Bitget exploits and the Lazarus Group.
  • ZachXBT's undercover work helped Tether freeze $442,000 of stolen funds, adding to over $75 million frozen overall.

Zachary Wolk, a blockchain investigator popularly known as ZachXBT, working as an Incident Response Advisor at Paradigm crypto firm, has detailed how he posed as a client to infiltrate a Chinese organized crime syndicate that has moved more than $1 billion tied to multiple blockchain exploits.

On October 5, ZachXBT deconstructed his undercover operation that helped disrupt a sophisticated laundering network that is connected with the Lazarus Group, a cybercrime group operating on behalf of the North Korean government.

In a bid to gain trust with this syndicate, the crypto investigator risked $349,700 of his own capital across 15 identified suspicious accounts. Specifically, he initiated test transactions, paid standard 5% fees, and traced illicit flows across major blockchains.

One member of this criminal group, using the pseudonym Jimmy Green, reassured ZachXBT that the laundered funds were clear of freezing. Furthermore, this on-chain sleuth noted that this criminal organization handled most of the $1.5 billion from the February 2025 Bybit exploit and $387 million tied to the September 2026 Bitget incident.

Undercover operation reveals syndicate details

As trust grew, Jimmy started sharing details about the operation. He talked about moving Bybit funds ahead of time, mentioned activities in Hong Kong and mainland China, and sent screenshots of bridges that ZachXBT quickly matched on explorers like THORChain.

Jimmy also provided Solana addresses tied to a cluster that moved more than $12 million of the stolen Bybit funds across Bitcoin, Ethereum, and Tron.

As a result, ZachXBT’s tracking helped Tether later freeze $442,000 from the stolen funds. Overall, this on-chain investigator has helped freeze more than $75 million linked to North Korean hacks since 2022.

However, he is calling for financial assistance to fund his investigations, which could further counter on-chain crime.

Share the article:

Top Trending Cryptocurrencies on The Market

Current Price

$0.08149

7 Days
PYTH 7 days: +0.09%

Market Cap

$642.5M 7.12%

24h Volume

$79.3M

Supplies

10.0B / 10.0B

Current Price

$0.007455

7 Days
VET 7 days: +5.51%

Market Cap

$641.6M 6.43%

24h Volume

$9.0M

Supplies

86.0B / 86.7B

Current Price

$1.190

7 Days
EUTBL 7 days: +0.87%

Market Cap

$639.1M -0.13%

24h Volume

-

Supplies

537.2M / ∞

Current Price

$0.02715

7 Days
No 7d data

Market Cap

$635.9M -12.56%

24h Volume

$16.0M

Supplies

100.0B / 100.0B

Current Price

$0.6340

7 Days
TIA 7 days: +17.08%

Market Cap

$624.2M 0.51%

24h Volume

$254.6M

Supplies

1.2B / ∞

Current Price

$0.3908

7 Days
CRV 7 days: +18.66%

Market Cap

$616.0M 3.87%

24h Volume

$68.1M

Supplies

2.4B / 3.0B

Current Price

$0.07458

7 Days
BDX 7 days: -11.37%

Market Cap

$587.0M 0.58%

24h Volume

$4.2M

Supplies

9.9B / ∞

Current Price

$1.053

7 Days
JAAA 7 days: +0.08%

Market Cap

$581.0M 0.01%

24h Volume

-

Supplies

551.6M / ∞

Current Price

$0.006535

7 Days
FLR 7 days: -3.97%

Market Cap

$571.4M 2.09%

24h Volume

$1.9M

Supplies

106.8B / ∞

Current Price

$0.1178

7 Days
Q 7 days: +353.38%

Market Cap

$555.0M -3.97%

24h Volume

$11.1M

Supplies

10.0B / 10.0B

Current Price

$2.011

7 Days
RAY 7 days: +8.13%

Market Cap

$544.3M 2.58%

24h Volume

$54.6M

Supplies

555.0M / 555.0M

Current Price

$0.9983

7 Days
USD0 7 days: -0.05%

Market Cap

$541.2M -0.06%

24h Volume

$206.8K

Supplies

542.1M / ∞

Notifications Login to see

Today

No Notifications

↑