Odaily星球日报讯 Arkham 于 X 平台发文称，Bybit 黑客赏金已被链上侦探 ZachXBT 领取。ZachXBT 在北京时间 2 月 22 日凌晨 03:09 时提交了确凿证据，证明朝鲜黑客组织 Lazarus Group 策划了此次攻击，并附带测试交易分析、相关钱包连接及取证图表。该报告已提交给 ByBit 团队协助调查。 此外，ZachXBT 于评论区表示，根据他本人及 CF 的 Josh 调查，Bybit 黑客攻击与 Phemex 黑客攻击存在关联。

Odaily星球日报讯 Arkham 于 X 平台发文称，Bybit 黑客赏金已被链上侦探 ZachXBT 领取。ZachXBT 在北京时间 2 月 22 日凌晨 03:09 时提交了确凿证据，证明朝鲜黑客组织 Lazarus Group 策划了此次攻击，并附带测试交易分析、相关钱包连接及取证图表。该报告已提交给 ByBit 团队协助调查。此外，ZachXBT 于评论区表示，根据他本人及 CF 的 Josh 调查，Bybit 黑客攻击与 Phemex 黑客攻击存在关联。

ByBit黑客攻击事件系朝鲜黑客组织Lazarus Group策划实施，与Phemex黑客攻击相关

Odaily reported that Arkham posted on the X platform, stating that the Bybit bug bounty has been claimed by on-chain detective ZachXBT. ZachXBT submitted conclusive evidence at 3:09 AM Beijing time on February 22, proving that the North Korean hacker group Lazarus Group orchestrated the attack, along with test transaction analysis, related wallet connections, and forensic charts. The report has been submitted to the Bybit team to assist in the investigation. Additionally, ZachXBT commented in the thread that, based on his and CF's Josh's investigation, the Bybit hack is related to the Phemex hack.

The ByBit hack was planned and carried out by the North Korean hacker group Lazarus Group, which is related to the Phemex hack

In the early morning of February 22nd, on-chain detective Zachxbt monitored suspicious fund outflows from Bybit. Subsequent on-chain records show that a Bybit multi-signature address transferred ETH worth $1.5 billion and used a DEX to convert LSD assets into native ETH. Possibly affected by FUD sentiment, Ethereum briefly fell below $2,700, and Bybit's native platform token MNT briefly fell below $0.9, a 24-hour drop of 7.71%.
<Bybit CEO Ben Zhou...>

Timeline | More than 500,000 ETH stolen from Bybit, with a loss of $1.5 billion

Odaily reports that ZachXBT posted on his personal Telegram channel that his sources confirm it's a security incident with Bybit. Additionally, ZachXBT warned relevant personnel at major exchanges to blacklist the following EVM addresses: 0x47666fab8bd0ac7003bce3f5c3585383f09486e2, 0xa4b2fd68593b6f34e51cb9edb66e71c1b4ab449e, 0x36ed3c0213565530c35115d93a80f9c04d94e4cb, 0x1542368a03ad1f03d96D51B414f4738961Cf4443. Previously, on-chain sleuth ZachXBT posted on his personal Telegram channel that he had detected suspicious outflows of over $1.46 billion from Bybit, and would provide updates on the related addresses, which is 0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2. mETH & stETH are currently being swapped for ETH on DEX.

ZachXBT: My sources confirm that the Bybit fund outflow was a security incident

Odaily Odaily reported that Slow Mist Yuxian posted on the X platform: "Although there is no clear evidence now, judging from the Safe multi-signature method and the current coin laundering method, it seems like North Korean hackers."