Cryptelio

ZachXBT Infiltrates Lazarus Group's Laundering Network with $349,700 Investment

Cryptelio Editorial Published 5 Oct 2026 · 20:31 UTC Updated 5 Oct 2026 · 21:02 UTC
ZachXBT Infiltrates Lazarus Group's Laundering Network with $349,700 Investment

In a bold move, crypto investigator ZachXBT has claimed to have infiltrated a Chinese organized crime syndicate that has laundered over $1 billion for North Korea's Lazarus Group. By posing as a money laundering client, ZachXBT managed to gather crucial intelligence that has led to significant actions against illicit activities.

Last week, ZachXBT revealed on social media that he contacted a syndicate member known as "Jimmy Green" and fronted $349,700 in USDC to build trust. This undercover operation began shortly after the $1.5 billion hack of the Bybit exchange in February 2025, which is believed to have involved the syndicate in laundering the stolen funds.

Through his interactions with Jimmy Green, ZachXBT was able to obtain specific cryptocurrency addresses and transaction details that helped him trace funds across various blockchains. His findings contributed to Tether freezing 442,000 USDT linked to the Bybit hack, highlighting the risks and complexities involved in laundering operations.

Despite the personal risks associated with engaging directly with the syndicate, ZachXBT's investigation has already yielded results, including the freezing of over $75 million tied to North Korean activities since 2022. His approach underscores the potential of targeting laundering networks as a means to disrupt the flow of stolen funds.

As ZachXBT continues his work, he hopes to secure further funding to support high-risk investigations that can lead to significant breakthroughs in tracing illicit crypto activities.

Updated 21:02 UTC

ZachXBT's Investigation into the Lazarus Group

Blockchain investigator ZachXBT infiltrated a Chinese laundering syndicate by posing as a cryptocurrency client, investing $349,700 USDC to establish a relationship with a contact named Jimmy Green.

His investigation revealed that the network laundered over $1 billion for the Lazarus Group, particularly following the February 2025 Bybit exploit, where North Korea allegedly stole approximately $1.5 billion in virtual assets.

Through repeated transactions, ZachXBT gained insights into the movement of stolen funds, including a cluster involving more than $12 million in Bybit funds, which were later linked to a Tether freeze of 442,000 USDT.

His findings indicate that the laundering operations extended beyond Bybit, with connections to a previous freeze of 332,000 USDC tied to the Poloniex exploit in 2024.

ZachXBT's approach involved becoming a trading counterparty to gather intelligence, which he believes contributed to freezing funds associated with the Bybit exploit.

FAQ

Who is ZachXBT?

ZachXBT is a crypto investigator known for his work in tracing illicit activities in the cryptocurrency space, particularly focusing on money laundering operations linked to organized crime and cybercriminals.

What was the purpose of ZachXBT's undercover operation?

The purpose of ZachXBT's undercover operation was to infiltrate a Chinese organized crime syndicate involved in laundering money for North Korea's Lazarus Group, in order to gather intelligence and disrupt their operations.

How much money did ZachXBT invest to gain trust within the syndicate?

ZachXBT invested $349,700 in USDC to build trust with a syndicate member known as 'Jimmy Green' during his undercover operation.

What significant actions have resulted from ZachXBT's investigation?

ZachXBT's investigation has led to Tether freezing 442,000 USDT linked to the Bybit hack, as well as the freezing of over $75 million tied to North Korean activities since 2022.

What are ZachXBT's future plans regarding his investigations?

ZachXBT hopes to secure further funding to support high-risk investigations that can lead to significant breakthroughs in tracing illicit cryptocurrency activities.

Related

Comments

Comments are moderated before publish.

No comments yet — be the first.

Comment as guest

Captcha