The Undercover Operation: A Sleuth's Solitary Gambit
On the shadowy fringes of the crypto ecosystem, a clandestine investigation unfolded. Renowned on-chain investigator ZachXBT recently pulled back the curtain on a deep-cover operation targeting a sophisticated money laundering network. This network, allegedly linked to the North Korean Lazarus Group, is accused of washing over $10 billion in illicit proceeds from multiple exploits.
From Public Chats to Building "Trust"
The operation began in the aftermath of the staggering February 2025 hack of the Bybit exchange. Scouring public Telegram and Discord groups, ZachXBT noticed a surge of accounts processing orders linked to the stolen funds.
He adopted the persona of a routine client, initiating contact with an operator using the alias "Jimmy Green." Through a series of small USDC and USDT exchange transactions, he gradually built rapport. This trust came at a personal cost, with ZachXBT absorbing losses of roughly 5% on each trade.
Actionable Intelligence and On-Chain Breakthroughs
As confidence grew, "Jimmy Green" began sharing advance details of the network's fund movement plans, even boasting that his team had laundered a significant portion of the stolen Bybit capital.
This intelligence proved pivotal. ZachXBT identified a cluster of Solana addresses tied to more than $12 million from the Bybit heist. The investigation yielded a direct result: $442,000 in USDT associated with these addresses was subsequently frozen by the issuer.
Tangible Results and a Call for Support
The operation's impact extended further. ZachXBT confirmed the freezing of $332,000 in USDC connected to the Poloniex hack and traced another $3 million in fraudulent proceeds to a specific hot wallet that was later sanctioned.
All verified evidence and intelligence were handed over to private-sector investigators and law enforcement. ZachXBT disclosed that he fronted approximately $349,700 for this operation, bearing both the financial loss and associated personal risk. Since 2022, his work has contributed to the freezing of over $75 million in assets linked to North Korean-related incidents.
Sharing his story, he also issued a call for funding from foundations and individuals to support his continued work on cases others might deem unfeasible.