BYBIT HACK更新：朝鮮Lazarus Group使用Wasabi Mixer洗錢1億美元

15億美元的Bybit Cryptocrency盜竊案背後的黑客已經通過混合服務和點對點（P2P）供應商開始洗錢。

The hackers behind the $1.5 billion Bybit (뱌이빗) hack have started laundering the stolen bitcoin through mixing services and peer-to-peer (P2P) vendors, reports suggest.

報導稱，15億美元的bybit（뱌이빗）黑客hack背後的黑客已經通過混合服務和點對點（P2P）供應商開始洗錢。

According to a post by Bybit CEO Ben Zhou, 193 BTC, valued at $16 million, were funneled through the Wasabi mixer before being distributed across various P2P networks.

根據拜比特首席執行官本·週（Ben Zhou）的一篇文章，其價值為1600萬美元，在瓦薩比攪拌機上匯集了1600萬美元，然後在各種P2P網絡上分發。

The heist, which took place in February, saw hackers steal a staggering amount of cryptocurrency from the exchange, with the majority of the stolen funds being in bitcoin.

搶劫案發生在2月，看到黑客從交易所竊取了驚人的加密貨幣，大多數被盜的資金都在比特幣中。

The hackers exchanged 86 of the stolen funds for ether to Bitcoin.

黑客將86個被盜資金換成了比特幣。

The amount of 440,091 ETH, which is equivalent to approximately $1.23 billion, was swapped for 12,836 BTC.

440,091個ETH的金額相當於約12.3億美元，換成12,836 BTC。

The received Bitcoin was then divided into 9,117 wallets, with an average balance per wallet of 1.41 BTC.

然後將接收的比特幣分為9,117錢包，每個錢包平均餘額為1.41 BTC。

Cross-chain liquidity protocols such as THORChain have been identified as the principal means through which the conversion occurred.

跨鏈流動性方案（例如胸切chain）已被確定為發生轉換的主要手段。

This method allows users to interchange assets between different blockchains without dealing with centralized exchanges.

這種方法允許用戶在不同的區塊鏈之間互換資產而無需處理集中式交換。

However, the conversion process began with the hackers transferring the stolen ether to a new wallet, where they used it to purchase BTC via the cross-chain protocol.

但是，轉換過程始於黑客將被盜的以太轉移到一個新錢包，在那裡他們使用跨鏈協議購買了BTC。

Afterward, they used mixers to try and obscure the movements of the funds.

之後，他們使用攪拌機試圖掩蓋資金的動作。

While the hackers are suspected to be from the North Korean Lazarus Group, they have been trying to wash the stolen Bitcoin through several mixers.

雖然涉嫌來自朝鮮拉撒路集團，但他們一直在試圖通過幾個攪拌機清洗被盜的比特幣。

Some of the presently available mixers are Wasabi, CryptoMixer, Railgun, and Tornado Cash. The main purpose of using a mixer is to hide the history of the transactions to ensure that the traces cannot be followed.

一些目前可用的攪拌機是Wasabi，Cryptomixer，Railgun和Tornado Cash。使用混音器的主要目的是隱藏交易的歷史記錄，以確保無法遵循軌跡。

“Decoding mixer transactions is the problem which is on the top of the list,” said Bybit CEO Ben Zhou for X.

Bybit首席執行官Ben Zhou表示：“解碼攪拌機交易是列表頂部的問題。”

He further noted that the laundering activity will continue to rise with more funds being channeled through these services.

他進一步指出，隨著這些服務通過更多的資金，洗錢活動將繼續上升。

Wasabi is a Bitcoin mixing service that introduced the CoinJoin technique which combines several transactions into one to increase anonymity.

Wasabi是一項比特幣混合服務，引入了CoinJoin技術，該技術將多個交易結合在一起以增加匿名性。

This way, blockchain investigators are unable to easily trace movements of funds by an individual.

這樣，區塊鏈調查人員就無法輕鬆地追踪個人的資金運動。

After passing through mixers, the stolen Bitcoin is being sent to P2P vendors. These vendors facilitate direct transactions between individuals without requiring intermediaries.

通過攪拌機後，被盜的比特幣被發送給P2P供應商。這些供應商促進了個人之間的直接交易，而無需中介。

Since P2P trading often bypasses centralized oversight, it adds another layer of complexity to tracking and recovering stolen assets.

由於P2P交易經常繞過集中的監督，因此它為跟踪和恢復偷竊資產增加了另一層複雜性。

According to Bybit, 88.8% of the stolen funds remain traceable, while 7.6% have become untraceable due to laundering efforts. Additionally, 3.5% of the funds have been successfully frozen through cooperation with industry partners.

據Bybit稱，有88.8％的被盜資金仍然可以追溯，而由於洗錢工作，有7.6％的資金變得無法追踪。此外，通過與行業合作夥伴的合作，已成功凍結了3.5％的資金。

Following the hack, the exchange launched a bounty program to incentivize individuals and organizations to help trace and freeze the stolen assets.

在黑客攻擊之後，該交易所啟動了一個賞金計劃，以激勵個人和組織幫助追踪和凍結被盜資產。

The program has allocated a total of $140 million in rewards, with $2.2 million already awarded.

該計劃總共分配了1.4億美元的獎勵，已經授予了220萬美元。

The bounty is structured to provide 10% of any recovered funds, with half going to the entity that successfully freezes them and the other half to the first reporters who contribute to the freezing process.

賞金的結構是提供任何收回的資金的10％，一半將成功凍結它們的實體，而另一半則歸結為為凍結過程做出貢獻的第一批記者。

In the past 30 days, Bybit received 5,012 bounty reports, of which 63 were deemed valid.

在過去的30天中，拜比特收到了5,012個賞金報告，其中63個被視為有效。

Bybit CEO Ben Zhou highlighted the need for more experts who can analyze mixer transactions and track stolen funds.

Bybit首席執行官Ben Zhou強調了需要分析混合交易和追踪盜竊資金的更多專家的需求。

"We need more experts to help decode mixer transactions & track stolen funds. Join the Bybit Bounty Program today & contribute to the recovery effort!" he said.

“我們需要更多的專家來幫助解碼混音器交易和追踪偷竊資金。加入今天的Bybit Bounty計劃，並為恢復工作做出貢獻！”他說。

Data from Arkham Intelligence suggests that the Lazarus Group currently holds 13,400 BTC, much of which is linked to the Bybit hack.

來自Arkham Intelligence的數據表明，Lazarus集團目前持有13,400 BTC，其中大部分與Bybit Hack有關。

Investigators are continuing to monitor these assets while working with exchanges and blockchain analytics firms to prevent further laundering.

調查人員在與交易所和區塊鏈分析公司合作時繼續監視這些資產，以防止進一步洗錢。