{"id":79129,"date":"2026-10-06T08:27:08","date_gmt":"2026-10-06T08:27:08","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/zachxbt-infiltrates-crypto-syndicate-tied-to-1-5b-bybit-hack-bitcoin-news\/"},"modified":"2026-10-06T08:27:08","modified_gmt":"2026-10-06T08:27:08","slug":"zachxbt-infiltrates-crypto-syndicate-tied-to-1-5b-bybit-hack-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/zachxbt-infiltrates-crypto-syndicate-tied-to-1-5b-bybit-hack-bitcoin-news\/","title":{"rendered":"ZachXBT Infiltrates Crypto Syndicate Tied to $1.5B Bybit Hack \u2013 Bitcoin News"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">ZachXBT went undercover in a Chinese syndicate that laundered over $1B in crypto for the Lazarus Group.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">He fronted $350K of his own money to gain trust, tracking funds from Bybit\u2019s $1.5B hack in 2025.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">The intel gathered helped freeze $75M in stolen funds, including 442,000 USDT frozen by Tether.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>ZachXBT Reveals Chinese Money Laundering Collective Infiltration<\/h2>\n<p>ZachXBT, one of the most renowned blockchain sleuths, revealed that he <a href=\"https:\/\/x.com\/zachxbt\/status\/2107081638073319437?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">infiltrated a Chinese crypto money laundering group<\/a> in 2025.<\/p>\n<p>The infiltration began in February, shortly after Bybit was hacked by a group called TraderTraitor, which <a href=\"https:\/\/news.bitcoin.com\/massive-1-4b-eth-steth-exodus-from-bybit-sparks-security-concerns\/\">siphoned over $1.5 billion in crypto assets<\/a> from the exchange wallets. ZachXBT identified several users in public Discord and Telegram groups asking for support for orders directly linked to stolen funds from Bybit, in the same way that threat actors linked to the receiver Bitget hack are now openly creating support tickets for orders in public groups.<\/p>\n<p>Posing as a customer, ZachXBT funded an address with nearly $350K USDC, intending to make transactions and gain the trust of Jimmy Green, an account tied to Bybit hack funds.<\/p>\n<p>After several exchanges, ZachXBT established a bond with Green. The individual started sharing more intelligence, announcing that the group would process funds from the Bybit hack before it happened, and also shared more details of their operations.<\/p>\n<p>Surprisingly, Green stressed that the group he worked for had <strong>\u201chonest businessmen,\u201d<\/strong> mentioning that integrity came first.<\/p>\n<p>ZachXBT disclosed Green\u2019s team laundered most of the $1.5 billion from the Bybit hack. <strong>\u201cThe usdt I give you is clean, won\u2019t freeze. We are professional in making partitions. This time, almost all the 1.5 billion ETH was laundered by our <\/strong><strong>team,\u201d<\/strong> Green pointed out.<\/p>\n<p><strong>\u201cAt this point, I realized I needed to continue losing 5% per order and gamble on capturing as much actionable intel as quickly as possible,\u201d<\/strong> ZachXBT stated. After this, he also linked Green\u2019s group to a cluster of $12 million Bybit exploit funds that were swapped between BTC, ETH, SOL, and TRX in real time.<\/p>\n<p>In another exchange, ZachXBT traced some of the funds Green mentioned were blocked to another group related to the Poloniex exploit. Similarly, ZachXBT also identified $3 million that Green laundered for another customer to Huione Guarantee, a peer-to-peer marketplace <a href=\"https:\/\/news.bitcoin.com\/us-treasury-hits-huione-group-in-sweeping-push-against-global-cyber-fraud\/\">operated by Huione Group<\/a>, which laundered over $70 billion in crypto over the last 5 years.<\/p>\n<p><strong>\u201cI hope to continue receiving grants from foundations and donations from individuals,\u201d<\/strong> said ZachXBT, stressing that he funded this operation on his own, losing 5% in every completed exchange, risking total loss if Green disappeared and his personal security if he was discovered.<\/p>\n<p><strong>\u201cIf this case resonates with you and you\u2019re in a position to support it, feel free to reach out,\u201d<\/strong> the <a href=\"https:\/\/news.bitcoin.com\/security\/zachxbt-declines-trace-coldcard-hack\/\">controversial investigator<\/a> concluded, lamenting that he could not share his findings due to the sensitivity of the investigation.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden md:flex md:flex-row md:gap-3 lg:hidden\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/zachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud\/\"><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/div>\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden lg:flex lg:flex-row lg:gap-4\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/zachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud\/\"><img alt=\"ZachXBT Exposes Canada as Worst Global Hotspot for Crypto Fraud\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F08%2Fzachxbt-exposes-canada-as-worst-global-hotspot-for-crypto-fraud-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/p>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">ZachXBT pointed out that Canada was the worst jurisdiction for crypto crime victims and pinpointed Toronto as one of the\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/crypto-news\/zachxbt-infiltrates-crypto-syndicate-tied-to-1-5b-bybit-hack\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways ZachXBT went undercover in a Chinese syndicate that laundered over $1B in crypto for the Lazarus Group. He fronted $350K of his own money to gain trust, tracking funds from Bybit\u2019s $1.5B hack in 2025. The intel gathered helped freeze $75M in stolen funds, including 442,000 [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":79130,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79129"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=79129"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79129\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/79130"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=79129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=79129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=79129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}