Researchers spot the stolen funds moving through cryptocurrency wallets that were used in earlier heists attributed to North Korea's Lazarus hacking group.

Investigation revealed that BingX, & Phemex hacks were also connected to the same cluster as Bybit's, confirming the threat actor’s identity as the Lazarus group.

North Korean hackers have begun laundering $140 million of the $1.46 billion stolen from Bybit through anonymous exchanges