Crypto detective goes undercover in Chinese syndicate laundering $1 billion
In this news:
Key takeaways
- Blockchain investigator ZachXBT went undercover to infiltrate a Chinese crime syndicate laundering over $1 billion.
- The syndicate is linked to major incidents including the Bybit and Bitget exploits and the Lazarus Group.
- ZachXBT's undercover work helped Tether freeze $442,000 of stolen funds, adding to over $75 million frozen overall.
Zachary Wolk, a blockchain investigator popularly known as ZachXBT, working as an Incident Response Advisor at Paradigm crypto firm, has detailed how he posed as a client to infiltrate a Chinese organized crime syndicate that has moved more than $1 billion tied to multiple blockchain exploits.
On October 5, ZachXBT deconstructed his undercover operation that helped disrupt a sophisticated laundering network that is connected with the Lazarus Group, a cybercrime group operating on behalf of the North Korean government.
In a bid to gain trust with this syndicate, the crypto investigator risked $349,700 of his own capital across 15 identified suspicious accounts. Specifically, he initiated test transactions, paid standard 5% fees, and traced illicit flows across major blockchains.
One member of this criminal group, using the pseudonym Jimmy Green, reassured ZachXBT that the laundered funds were clear of freezing. Furthermore, this on-chain sleuth noted that this criminal organization handled most of the $1.5 billion from the February 2025 Bybit exploit and $387 million tied to the September 2026 Bitget incident.
Undercover operation reveals syndicate details
As trust grew, Jimmy started sharing details about the operation. He talked about moving Bybit funds ahead of time, mentioned activities in Hong Kong and mainland China, and sent screenshots of bridges that ZachXBT quickly matched on explorers like THORChain.
Jimmy also provided Solana addresses tied to a cluster that moved more than $12 million of the stolen Bybit funds across Bitcoin, Ethereum, and Tron.
As a result, ZachXBT’s tracking helped Tether later freeze $442,000 from the stolen funds. Overall, this on-chain investigator has helped freeze more than $75 million linked to North Korean hacks since 2022.
However, he is calling for financial assistance to fund his investigations, which could further counter on-chain crime.
Share the article:
Trending News & Crypto World
Latest Crypto News
Top Trending Cryptocurrencies on The Market
Current Price
$0.08149
Market Cap
$642.5M 7.12%
24h Volume
$79.3M
Supplies
10.0B / 10.0B
Current Price
$0.007455
Market Cap
$641.6M 6.43%
24h Volume
$9.0M
Supplies
86.0B / 86.7B
Current Price
$1.190
Market Cap
$639.1M -0.13%
24h Volume
-
Supplies
537.2M / ∞
Current Price
$0.02715
Market Cap
$635.9M -12.56%
24h Volume
$16.0M
Supplies
100.0B / 100.0B
Current Price
$0.6340
Market Cap
$624.2M 0.51%
24h Volume
$254.6M
Supplies
1.2B / ∞
Current Price
$0.3908
Market Cap
$616.0M 3.87%
24h Volume
$68.1M
Supplies
2.4B / 3.0B
Current Price
$0.07458
Market Cap
$587.0M 0.58%
24h Volume
$4.2M
Supplies
9.9B / ∞
Current Price
$1.053
Market Cap
$581.0M 0.01%
24h Volume
-
Supplies
551.6M / ∞
Current Price
$0.006535
Market Cap
$571.4M 2.09%
24h Volume
$1.9M
Supplies
106.8B / ∞
Current Price
$0.1178
Market Cap
$555.0M -3.97%
24h Volume
$11.1M
Supplies
10.0B / 10.0B
Current Price
$2.011
Market Cap
$544.3M 2.58%
24h Volume
$54.6M
Supplies
555.0M / 555.0M
Current Price
$0.9983
Market Cap
$541.2M -0.06%
24h Volume
$206.8K
Supplies
542.1M / ∞