Addresses linked to the recent Bybit hack have been identified swapping millions of dollars worth of Ethereum (ETH) for DAI, a decentralized stablecoin. This move has raised eyebrows in the crypto community, especially given the ongoing controversy surrounding the exchange eXch, which has refused to freeze the hacked funds.
Key Takeaways
-
The Bybit hacker has swapped $3.64 million worth of ETH for DAI using decentralized exchanges (DEXs).
-
DAI is a stablecoin that cannot be frozen, making it attractive for cybercriminals.
-
The hacker's activities have involved multiple DEX platforms, including Uniswap and OKX DEX.
-
eXch, the exchange involved, has faced criticism for not cooperating with Bybit in freezing the stolen funds.
-
North Korean hacking group Lazarus is suspected to be behind the Bybit hack.
The Bybit Hack Overview
On February 21, 2025, Bybit, a prominent cryptocurrency exchange, suffered a significant security breach that resulted in the theft of approximately $1.4 billion worth of assets. The hacker, whose identity remains unknown, has since been active in moving the stolen funds through various channels.
Swapping ETH for DAI
Recent blockchain analysis has revealed that the hacker transferred $3.64 million worth of ETH to a specific address, which was subsequently used to acquire DAI. This transaction highlights the hacker's strategy of converting stolen assets into a stablecoin that is less susceptible to freezing by centralized authorities.
DAI, unlike other stablecoins such as Tether (USDT) and USD Coin (USDC), is governed by smart contracts and lacks a centralized issuer, making it a preferred choice for those looking to obscure the origins of their funds.
Controversy Surrounding eXch
The exchange eXch has come under fire for its refusal to freeze any funds associated with the Bybit hack. In contrast to other exchanges that have cooperated with Bybit by freezing accounts linked to the exploit, eXch has stated that it finds it difficult to collaborate with Bybit due to previous attacks on its reputation.
This refusal has led to speculation that eXch may be facilitating the laundering of the stolen funds, although the exchange has denied these allegations. The situation has raised questions about the responsibilities of exchanges in preventing the movement of stolen assets.
The Lazarus Connection
Onchain investigator ZachXBT has pointed to the North Korean hacking group Lazarus as the primary suspect behind the Bybit hack. This group has been linked to several high-profile cyberattacks in the past, and the similarities in the methods used in the Bybit hack to previous exploits attributed to Lazarus have drawn significant attention.
Conclusion
The ongoing saga of the Bybit hack serves as a stark reminder of the vulnerabilities present in the cryptocurrency ecosystem. As the hacker continues to maneuver the stolen funds through decentralized exchanges, the implications for security and regulatory measures in the crypto space remain profound. The situation also underscores the challenges faced by exchanges in dealing with the aftermath of such breaches, particularly when it comes to cooperation and accountability.