Vultisig founder says DPRK-linked Bybit transactions are ‘legitimate’

Crypto sleuth ZachXBT has called out a crypto wallet firm Vultisig for crowing about $200,000 it generated in revenue that is largely made up of crypto stolen from Bybit and laundered by North Korea.

THORChain founder John-Paul Thorbjornsen claimed the $200,000 in revenue was made through swaps via his multi-chain crypto wallet firm Vultisig. However, ZachXBT noted, “a good chunk of that revenue is being generated from the Bybit hack.”

He said, “DPRK has been doing BTC -> BNB or AVAX TC swaps via Vultisig for the past few days in size.”

ZachXBT’s screenshots show BTC increments worth between $50,000 and $200,000 being swapped with Vultisig.  

Read more: FBI confirms North Korean ‘TraderTraitor’ to blame for $1.5 billion Bybit hack

Addressing ZachXBT’s analysis, Thorbjornsen told Protos, “They are legitimate transactions.”

“Anyone who can sign a transaction can broadcast on-chain and pay a fee for inclusion. Ethereum and Bitcoin nodes have already accepted those transactions and made fees.”

ZachXBT has been helping the crypto exchange Bybit trace the $1.4 billion worth of ether (ETH) that was stolen by the North Korea-linked hacking group, Lazarus. 

Today, Bybit CEO Ben Zhou claimed that almost 89% of the hacked funds remain traceable, while 7.59% have gone dark and 3.54% have been frozen.

He said roughly 440,091 ETH, worth around $1.23 billion, has been converted into 12,836 BTC  across 9,117 wallets and that the hackers have started to use crypto mixers to obfuscate the stolen funds. 

Got a tip? Send us an email or ProtonMail. For more informed news, follow us on XInstagramBluesky, and Google News, or subscribe to our YouTube channel.