North Korean Lazarus Group Linked to Both Bybit and Phemex Exchange Hacks

North Korean state-sponsored Hacking group’s digital footprint has been detected in two major cryptocurrency exchange breaches, according to blockchain investigators. The revelation comes as cryptocurrency security experts analyze the unprecedented $1.4 billion theft from Bybit on February 21, 2024.

Renowned blockchain investigator ZachXBT has identified similarities in the attack patterns connecting the recent Bybit breach to January’s $29 million Phemex exchange hack. The analysis reveals consistent methodologies typical of Lazarus Group operations, known for their sophisticated cryptocurrency heists.

The Bybit incident specifically targeted liquid-staked Ether (stETH), Mantle Staked ETH (mETH), and various ERC-20 tokens. Liquid staking allows users to stake their Ethereum while maintaining liquidity through tradeable derivative tokens, making these assets particularly attractive to attackers due to their high value and liquidity.

Arkham Intelligence, a blockchain analytics firm, corroborated these findings through independent investigation. The Lazarus Group has a documented history of targeting cryptocurrency platforms, with previous attacks including the $625 million Ronin Bridge hack in 2022 and the $100 million Harmony Bridge breach.

This latest series of attacks underscores the growing sophistication of state-sponsored cryptocurrency theft operations and highlights the critical importance of enhanced security measures in digital asset custody systems.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

• Massive $1.5 Billion Crypto Heist Hits Major Exchange Bybit
• Bitget Transfers $105M in ETH to Support Bybit After Major Hack
• Bybit Exchange Resumes Normal Operations After Historic $1.5B Hack
• SEC Withdraws Lawsuit Against Coinbase in Major Cryptocurrency Development
• Blockchain Gaming Faces Investment Drought as Capital Recycles Between Projects