BYBIT HACK更新：朝鲜Lazarus Group使用Wasabi Mixer洗钱1亿美元

15亿美元的Bybit Cryptocrency盗窃案背后的黑客已经通过混合服务和点对点（P2P）供应商开始洗钱。

The hackers behind the $1.5 billion Bybit (뱌이빗) hack have started laundering the stolen bitcoin through mixing services and peer-to-peer (P2P) vendors, reports suggest.

报道称，15亿美元的bybit（뱌이빗）黑客hack背后的黑客已经通过混合服务和点对点（P2P）供应商开始洗钱。

According to a post by Bybit CEO Ben Zhou, 193 BTC, valued at $16 million, were funneled through the Wasabi mixer before being distributed across various P2P networks.

根据拜比特首席执行官本·周（Ben Zhou）的一篇文章，其价值为1600万美元，在瓦萨比搅拌机上汇集了1600万美元，然后在各种P2P网络上分发。

The heist, which took place in February, saw hackers steal a staggering amount of cryptocurrency from the exchange, with the majority of the stolen funds being in bitcoin.

抢劫案发生在2月，看到黑客从交易所窃取了惊人的加密货币，大多数被盗的资金都在比特币中。

The hackers exchanged 86 of the stolen funds for ether to Bitcoin.

黑客将86个被盗资金换成了比特币。

The amount of 440,091 ETH, which is equivalent to approximately $1.23 billion, was swapped for 12,836 BTC.

440,091个ETH的金额相当于约12.3亿美元，换成12,836 BTC。

The received Bitcoin was then divided into 9,117 wallets, with an average balance per wallet of 1.41 BTC.

然后将接收的比特币分为9,117钱包，每个钱包平均余额为1.41 BTC。

Cross-chain liquidity protocols such as THORChain have been identified as the principal means through which the conversion occurred.

跨链流动性方案（例如胸切chain）已被确定为发生转换的主要手段。

This method allows users to interchange assets between different blockchains without dealing with centralized exchanges.

这种方法允许用户在不同的区块链之间互换资产而无需处理集中式交换。

However, the conversion process began with the hackers transferring the stolen ether to a new wallet, where they used it to purchase BTC via the cross-chain protocol.

但是，转换过程始于黑客将被盗的以太转移到一个新钱包，在那里他们使用跨链协议购买了BTC。

Afterward, they used mixers to try and obscure the movements of the funds.

之后，他们使用搅拌机试图掩盖资金的动作。

While the hackers are suspected to be from the North Korean Lazarus Group, they have been trying to wash the stolen Bitcoin through several mixers.

虽然涉嫌来自朝鲜拉撒路集团，但他们一直在试图通过几个搅拌机清洗被盗的比特币。

Some of the presently available mixers are Wasabi, CryptoMixer, Railgun, and Tornado Cash. The main purpose of using a mixer is to hide the history of the transactions to ensure that the traces cannot be followed.

一些目前可用的搅拌机是Wasabi，Cryptomixer，Railgun和Tornado Cash。使用混音器的主要目的是隐藏交易的历史记录，以确保无法遵循轨迹。

“Decoding mixer transactions is the problem which is on the top of the list,” said Bybit CEO Ben Zhou for X.

Bybit首席执行官Ben Zhou表示：“解码搅拌机交易是列表顶部的问题。”

He further noted that the laundering activity will continue to rise with more funds being channeled through these services.

他进一步指出，随着这些服务通过更多的资金，洗钱活动将继续上升。

Wasabi is a Bitcoin mixing service that introduced the CoinJoin technique which combines several transactions into one to increase anonymity.

Wasabi是一项比特币混合服务，引入了CoinJoin技术，该技术将多个交易结合在一起以增加匿名性。

This way, blockchain investigators are unable to easily trace movements of funds by an individual.

这样，区块链调查人员就无法轻松地追踪个人的资金运动。

After passing through mixers, the stolen Bitcoin is being sent to P2P vendors. These vendors facilitate direct transactions between individuals without requiring intermediaries.

通过搅拌机后，被盗的比特币被发送给P2P供应商。这些供应商促进了个人之间的直接交易，而无需中介。

Since P2P trading often bypasses centralized oversight, it adds another layer of complexity to tracking and recovering stolen assets.

由于P2P交易经常绕过集中的监督，因此它为跟踪和恢复偷窃资产增加了另一层复杂性。

According to Bybit, 88.8% of the stolen funds remain traceable, while 7.6% have become untraceable due to laundering efforts. Additionally, 3.5% of the funds have been successfully frozen through cooperation with industry partners.

据Bybit称，有88.8％的被盗资金仍然可以追溯，而由于洗钱工作，有7.6％的资金变得无法追踪。此外，通过与行业合作伙伴的合作，已成功冻结了3.5％的资金。

Following the hack, the exchange launched a bounty program to incentivize individuals and organizations to help trace and freeze the stolen assets.

在黑客攻击之后，该交易所启动了一个赏金计划，以激励个人和组织帮助追踪和冻结被盗资产。

The program has allocated a total of $140 million in rewards, with $2.2 million already awarded.

该计划总共分配了1.4亿美元的奖励，已经授予了220万美元。

The bounty is structured to provide 10% of any recovered funds, with half going to the entity that successfully freezes them and the other half to the first reporters who contribute to the freezing process.

赏金的结构是提供任何收回的资金的10％，一半将成功冻结它们的实体，而另一半则归结为为冻结过程做出贡献的第一批记者。

In the past 30 days, Bybit received 5,012 bounty reports, of which 63 were deemed valid.

在过去的30天中，拜比特收到了5,012个赏金报告，其中63个被视为有效。

Bybit CEO Ben Zhou highlighted the need for more experts who can analyze mixer transactions and track stolen funds.

Bybit首席执行官Ben Zhou强调了需要分析混合交易和追踪盗窃资金的更多专家的需求。

"We need more experts to help decode mixer transactions & track stolen funds. Join the Bybit Bounty Program today & contribute to the recovery effort!" he said.

“我们需要更多的专家来帮助解码混音器交易和追踪偷窃资金。加入今天的Bybit Bounty计划，并为恢复工作做出贡献！”他说。

Data from Arkham Intelligence suggests that the Lazarus Group currently holds 13,400 BTC, much of which is linked to the Bybit hack.

来自Arkham Intelligence的数据表明，Lazarus集团目前持有13,400 BTC，其中大部分与Bybit Hack有关。

Investigators are continuing to monitor these assets while working with exchanges and blockchain analytics firms to prevent further laundering.

调查人员在与交易所和区块链分析公司合作时继续监视这些资产，以防止进一步洗钱。