The cold-wallet signing flow of the Bybit exchange was compromised, draining roughly $1.5B in ETH. It is the largest crypto theft on record, and the FBI publicly attributed it to North Korea's TraderTraitor (Lazarus Group).
| Chain | Address | Role | Source | Action |
|---|---|---|---|---|
| Ethereum | ↗ | laundering | Source ↗ | Scan this address |
| Ethereum | ↗ | laundering | Source ↗ | Scan this address |
| Ethereum | ↗ | laundering | Source ↗ | Scan this address |
| Ethereum | ↗ | laundering | Source ↗ | Scan this address |
| Ethereum | ↗ | laundering | Source ↗ | Scan this address |
Figures are approximate, compiled from public reporting. Attacker addresses are included only where verified against an authoritative source. Attribution (e.g. Lazarus Group) is shown only when publicly stated by an official body.
© 2026 ChainAnalyzer. All rights reserved.