朝鮮的拉撒路集團清洗了所有被盜的499,000個以太坊

據報導，北朝鮮臭名昭著的拉撒路集團（Lazarus Group

The notorious Lazarus Group, a North Korean hacking collective, has reportedly finished laundering all of the stolen 499,000 Ethereum (ETH), worth an astounding $1.39 billion, in just 10 days, according to data from the on-chain analytics firm, emberCN.

據報導，臭名昭著的拉撒路集團（Lazarus Group）是據報導，據報導，所有被盜的499,000個以太坊（ETH）的洗錢，在短短10天內價值13.9億美元，這是一筆驚人的13.9億美元。

The Bybit hacker has managed to shuffle all the stolen funds using crypto mixers and decentralized exchanges (DEXs). Since the Bybit hack, the Ethereum (ETH) price has already dropped by 23% crashing all the way from $2,780 levels to now at $2,087 levels.

Bybit Hacker已設法使用加密貨幣和分散交易所（DEX）將所有被盜資金洗牌。自Bybit Hack以來，以太坊（ETH）的價格已經下降了23％，從2,780美元的水平墜落到現在的水平為2,087美元。

Source: emberCN

資料來源：Embercn

The اتح краудф announced on Tuesday that it has taken seven days to launder 499,000 ETH, stolen from crypto exchange Bybit in a recent hack. The اتح краудф is known for its involvement in major cryptocurrency heists, including the 2017 heist of $72 million from Bangladesh Bank and the 2022 hack of Axie Infinity’s Ronin Network.

週二宣布，已經用799,000 ETH宣布，在最近的一次黑客中，已經花了7天的時間洗錢了。 ااا試意見以其參與重大加密貨幣搶劫案而聞名，其中包括2017年的搶劫孟加拉國銀行的7200萬美元和2022年Axie Infinity的Ronin Network的2022年黑客。

The North Korean hacking group, Lazarus, is said to have used THORChain as its primary laundering platform. Allegedly led by Park Jin Hyok, who is wanted by the FBI, the group’s existence has been repeatedly denied by North Korea.

據說朝鮮黑客組織拉撒路（Lazarus）將Thorchain用作其主要洗錢平台。據稱，由聯邦調查局（FBI）通緝的帕克·金·霍克（Park Jin Hyok）領導，該組織的存在被朝鮮一再拒絕。

The report suggests that Lazarus laundered a massive $5.9 billion through THORChain, with the platform collecting a total of $5.5 million in transaction fees during the process. This makes it the largest cryptocurrency laundering operation ever recorded.

該報告表明，拉撒路通過Thorchain洗錢了59億美元，該平台在此過程中收取了550萬美元的交易費用。這使其成為有史以來最大的加密貨幣洗滌操作。

Bybit Is Seeking Leads on the Stolen Ethereum

Bybit正在尋找被盜的以太坊的潛在客戶

Although it is almost impossible to track the stolen funds, Bybit co-founder Ben Zhou has announced to offer millions in rewards for any leads regarding the stolen assets. But Zhou also admitted that 77% of the stolen funds remain traceable, while 20% are untraceable, and 3% have been frozen.

儘管幾乎不可能跟踪被盜的資金，但拜比特聯合創始人本周宣佈為有關被盜資產的任何潛在客戶提供數百萬美元的獎勵。但是周還承認，有77％的被盜資金仍然可以追溯，而20％的資金則無法追踪，而3％的資金被冷凍了。

Additionally, 83% of the stolen assets have been converted to Bitcoin and dispersed across 6,954 wallets, complicating recovery efforts. Zhou further wrote:

此外，有83％的被盜資產已轉換為比特幣，並分散在6,954個錢包中，使恢復工作變得複雜。週進一步寫道：

“We will not stop until Lazarus or bad actors in the industry are eliminated. In the future we will open it up to other victims of Lazarus as well.”

“直到拉撒路或行業不良行為者被淘汰之前，我們不會停止。將來，我們也將向拉撒路的其他受害者開放。”

As per the Bybit bounty system announced by Zhou, they will offer rewards for information leading to the recovery of assets stolen in the recent hack. Furthermore, individuals who identify who identify and report blockchain transactions linked to the theft will get 5% of the recovered crypto. Similarly, any exchange or mixer that aids in retrieving the funds will also earn 5%.

根據周的Bybit賞金系統，他們將提供獎勵信息，以獲取導致最近黑客盜竊的資產收回的信息。此外，確定誰識別和報告與盜竊有關的區塊鏈交易的個人將獲得恢復的加密貨幣的5％。同樣，任何有助於檢索資金的交換或混音器也將賺取5％。

Crypto exchange Bybit has declared a staggering $140 million separately to reward the investigators of the hack. Additionally, CEO Ben Zhou also announced the formation of the “HackBounty program”, to combat the industry wide theft. Speaking on this, Zhou said:

加密交易所Bybit宣布了一個驚人的1.4億美元，以獎勵黑客的調查人員。此外，首席執行官本·週還宣布了“哈克布爾計劃”的形成，以打擊行業盜竊案。關於此事，周說：

“I am energized by the incredible camaraderie on-chain and in real life. This can be a transformative moment for our industry if we get it right. Together, we can build a stronger defense system against cyber threats.”

“令人難以置信的友善的鍊子和現實生活中，我充滿活力。如果我們正確地做到這一點，這對我們的行業來說可能是一個變革的時刻。我們可以一起建立更強大的防禦系統，以抵抗網絡威脅。”

Details Regarding the Hack

有關黑客的詳細信息

Following the Bybit hack on February 21, internal investigators found that hackers decoded the smart contract logic thereby hacking the transfer of funds. As a result, the hackers manager to move more than 400,000 ETH and stETH, valued at over $1.5 billion to a mystery wallet controlled by attackers instead of being transferred to the intended hot wallet.

在2月21日的Bybit Hack之後，內部調查人員發現黑客解碼了智能合同邏輯，從而砍掉了資金的轉移。結果，黑客經理將超過40萬的ETH和Steth移動，價值超過15億美元，到一個由攻擊者控制的神秘錢包，而不是被轉移到預期的熱錢包中。

Further investigation revealed that the hackers managed to breach the cloud infrastructure SafeWallet, hosted on AWS S3 and CloudFront, reportedly had one of its accounts compromised. The software provider also confirmed that the hacker managed to infect a developer’s system, thereby injecting malicious code into the system.

進一步的調查顯示，黑客設法違反了AWS S3和Cloudfront主持的雲基礎設施Safewallet，據報導，其帳戶之一遭到了損害。該軟件提供商還確認，黑客設法感染了開發人員的系統，從而將惡意代碼注入系統。

“The forensic review into the targeted attack by the Lazarus Group on Bybit concluded that this attack targeted the Bybit Safe and was achieved through a compromised machine of a SafeWallet developer resulting in the proposal of a disguised malicious transaction,” SafeWallet noted in its investigative report.

SafeWallet在其調查性報告中指出：“拉撒路集團對拜特比特的有針對性攻擊的審查得出結論，這次攻擊針對bybit的安全，是通過折衷機器的安全性開發人員來實現的，導致了偽裝的惡意交易的提議。”