PANews reported on February 22 that according to ZachXBT monitoring, Lazarus Group mixed the funds from the initial theft addresses in the Bybit and Phemex incidents directly on the chain. Overlapping address: 0x33d057af74779925c4b2e720a820387cb89f8f65
On February 22, Bybit hacker attacked the transaction:
- 0xc963e65b9ec39b11076f78990c31f29aaa80705c75312dafd1748479e3e94ed0
- 0x411374feedcfa560335f00c0fcfa0a3906fdcc33687e6f924dd78ebecc45cd00
On February 20, Phemex hacker attacked the exchange:
- 0x6262a3339842240aeebae4ebfe338dbc771aa0e2df8f5a1ebcd7f9b090bedfe3
