BTC $71,807
2026 Bull Run Is Building Start trading with 5% OFF all fees
Sign Up Now
BTC $71,807
Bull Run 2026 | 5% Off Fees Open your Binance account today
Sign Up

ZachXBT: Vultisig Revenue Includes Funds from DPRK-Linked Bybit Hack

North Korean Hackers Linked to Vultisig's Revenue Claims as Bybit Tracks $1.4B Stolen Funds

  • Crypto investigator ZachXBT exposed that Vultisig’s claimed $200,000 revenue partially came from North Korean Hackers laundering stolen Bybit funds.
  • THORChain founder and Vultisig CEO John-Paul Thorbjornsen defended the transactions as “legitimate” despite their connection to the $1.4 billion Bybit hack.
  • Bybit CEO reports that 89% of the stolen funds remain traceable, with hackers converting approximately $1.23 billion ETH into Bitcoin across thousands of wallets.

Cryptocurrency wallet provider Vultisig faces scrutiny after security researcher ZachXBT revealed the firm’s recently celebrated $200,000 revenue included transactions linked to North Korean hackers laundering funds stolen from the Bybit exchange.

- Advertisement -
Ad
Altseason Is Loading. Don't watch from the sidelines.
SOL $90.51
DOGE $0.0963
LINK $9.02
SUI $1.00
5% off fees when you sign up
Start Trading

The controversy began when THORChain founder John-Paul Thorbjornsen announced the revenue milestone for his multi-chain wallet company Vultisig. Security researcher ZachXBT quickly responded with evidence suggesting a significant portion of those funds originated from hackers associated with North Korea‘s government.

“JP I hope you realize a good chunk of that revenue is being generated from the Bybit hack. DPRK has been doing BTC -> BNB or AVAX TC swaps via Vultisig for the past few days in size,” ZachXBT stated, providing screenshots showing Bitcoin transactions between $50,000 and $200,000 being processed through Vultisig’s platform.

When contacted about these allegations, Thorbjornsen defended the activity, telling Protos: “They are legitimate transactions. Anyone who can sign a transaction can broadcast on-chain and pay a fee for inclusion. Ethereum and Bitcoin nodes have already accepted those transactions and made fees.”

The transactions appear connected to the massive $1.4 billion theft from cryptocurrency exchange Bybit, which security experts have attributed to North Korea‘s Lazarus Hacking group. ZachXBT has been actively assisting Bybit in tracking these stolen funds.

- Advertisement -

Bybit CEO Ben Zhou provided an update on the recovery efforts, reporting that approximately 89% of the stolen assets remain traceable. According to Zhou, about 440,091 ETH (roughly $1.23 billion) has been converted into 12,836 BTC and distributed across more than 9,000 different wallets. He noted that hackers have begun employing cryptocurrency mixers to obscure the trail of stolen funds.

The FBI previously confirmed that the North Korean hacking collective known as “TraderTraitor” was responsible for the $1.5 billion Bybit security breach, representing one of the largest cryptocurrency thefts in history.

This incident highlights growing concerns about how decentralized finance platforms may inadvertently facilitate money laundering operations, even while operating within the technical parameters of blockchain networks.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -
Ad
Pay Less on Every Trade. For Life.
$10K/mo volume Save $60/yr
$50K/mo volume Save $300/yr
$100K/mo volume Save $600/yr
5% off all trading fees when you sign up
Claim Your Discount

Latest News

CBO: U.S. Debt to Hit $64 Trillion by 2036 Amid BRICS Exit

The Congressional Budget Office predicts US national debt will hit $64 trillion by 2036,...

Crypto Payments Double in Australia Despite Banking Hurdles

In 2026, 12% of Australians used crypto for goods and services, a significant rise...

Meta Shuts Down Virtual Reality Horizon Worlds in June

Meta Platforms will shut down its Horizon Worlds Metaverse for VR users in June,...

Bitrefill hacked by Lazarus Group-linked cyberattack

Bitrefill, a crypto e-commerce platform, was attacked on March 1 by Hackers with methods...

NVIDIA’s DLSS 5 Sparks Backlash Over “AI Art” Changes

NVIDIA unveiled DLSS 5 at GTC 2026, marking a shift from performance upscaling to...

Must Read

What Are Sniper Bots Used in Defi Trading?

You've heard about DeFi, but what about sniper bots? These high-speed trading tools are shaking up the crypto scene.But don't fret, you're not...
Ad
Altseason Is Loading. These 4 coins are trending right now.
SOL $92.12
DOGE $0.0950
LINK $9.02
SUI $1.02
5% off spot fees when you sign up
Start Trading