ChainCatcher news, Bybit CEO Ben Zhou posted an update on the March 20th theft incident: the total amount of stolen funds reached $1.4 billion (approximately 500,000 ETH). Of this, 68.57% is still traceable, 27.59% is no longer traceable, and 3.84% has been frozen.Flow of Funds Analysis:The untraceable funds mainly flowed into mixers, and were later transferred to P2P and over-the-counter trading platforms via cross-chain bridges. Recent observations indicate that North Korean hacker groups (DPRK) primarily use the Wasabi mixer. After being washed through Wasabi, a small amount of BTC was transferred to CryptoMixer, Tornado Cash, and Railgun, and subsequently exchanged across chains through platforms such as Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. Ultimately, these funds entered over-the-counter (OTC) or peer-to-peer (P2P) fiat exchange services.ETH Distribution:432,748 ETH (84.45%, approximately $1.21 billion) was transferred from Ethereum to BTC via Thorchain. Of this, 67.25% (342,975 ETH, approximately $960 million) was exchanged for 10,003 BTC, distributed across 35,772 wallets (an average of 0.28 BTC per wallet); 1.17% (5,991 ETH, approximately $16.77 million) remains in 12,490 wallets on the Ethereum chain (an average of 0.48 ETH per wallet).BTC Distribution:944 BTC (6.34%, approximately $90.62 million) entered the Wasabi mixer; 531 BTC (equivalent to 18,206 ETH, 3.57%) was transferred back to Ethereum from the BTC chain via Thorchain.In the past 60 days, 5,443 reports have been received, of which 70 are valid, calling for more bounty hunters who can crack mixers to join.

ChainCatcher news, Bybit CEO Ben Zhou posted on the X platform that he met with H.E. Nguyen Van Thang, the Minister of Finance of Vietnam, where he expressed Bybit's strong support for Vietnam's regulatory sandbox initiative and its vision of building a secure, transparent, and innovation-friendly digital asset ecosystem.It is reported that the meeting took place at the headquarters of the Ministry of Finance of Vietnam, focusing on the efforts Vietnam is making to establish a comprehensive legal framework for crypto assets. H.E. Nguyen Van Thang outlined Vietnam's plan to launch a pilot sandbox mechanism, which will allow regulators to test the issuance and trading of crypto assets in a controlled environment. The initiative aims to reduce risks, enhance investor protection, and ensure regulatory preparedness before formal legislation is enacted.

ChainCatcher news, according to Cointelegraph, the Vietnamese Ministry of Finance has partnered with Bybit to launch a pilot for cryptocurrency trading and establish a legal framework for its large crypto user base.Previously, Vietnamese Finance Minister Nguyen Van Thang met with Bybit CEO Ben Zhou at the ministry's headquarters on April 17 to discuss potential cooperation in the digital asset sector.

ChainCatcher news, Bybit co-founder and CEO Ben Zhou responded on the X platform to recent allegations of misconduct against Bybit.He stated that the claims of "promoting contract trading in schools," "reporting OKX wallets to the legal department," and "charging listing fees" have no evidence, calling these claims baseless rumors, and emphasized: "The crypto space is so chaotic because of rumors and lack of evidence."

ChainCatcher news, AI-driven asset management and research platform SoSoValue announced that it has officially launched a daily research report service for VIP users of Bybit as a technology and content provider. This content is based on SoSoValue's self-developed AI research engine and real-time data system, published daily by Bybit, focusing on core dynamics of the cryptocurrency market, providing customized, structured, and intelligent market insights for advanced users.The VIP daily research report is generated by the SoSoValue AI system and covers six major modules: industry breaking news, daily hot coin tracking, new coin launch express, today's must-read information, price structure analysis, and market sentiment monitoring. All content is based on SoSoValue's AI data understanding and dynamic recognition capabilities, forming a three-dimensional restoration and in-depth interpretation of the market's real-time status through semantic analysis, data aggregation, and logical modeling.The SoSoValue research engine incorporates multiple core capabilities, including trend evolution recognition algorithms, community sentiment modeling systems, and event-level structured news extraction technology. This collaboration marks the first large-scale application of SoSoValue's AI content service capabilities and validates its feasibility and high adaptability in professional scenarios to empower trading platforms.In the future, SoSoValue will continue to expand its AI content service capabilities, providing customized content modules, AI news services, and intelligent research integration solutions for more platform-based institutions, accelerating the evolution of cryptocurrency market information services from "manual editing" to "intelligent driving," and building a new generation of investment decision-making cognitive infrastructure.

ChainCatcher message, according to @ai_9684xtpa monitoring, the address 6U6GC...yurLj withdrew 10 million BMT from Bybit at an average price of $0.09273, worth $927,000; a month ago he also tried to make a small profit on BMT fluctuations, suspected of planning to bet on a rebound again.

ChainCatcher news, according to The Data Nerd monitoring, 2 hours ago, Gnome Labs deposited 10,850 BNB (approximately 6.51 million USD) to Bybit (the first deposit of BNB to Bybit). In total, it has deposited 763,700 USDC to Binance and Bybit within a month.

ChainCatcher message, according to The Data Nerd monitoring, 4 hours ago, a whale 0x603 withdrew 1,597 ETH (approximately 2.95 million USD) from Bybit. In the past 3 weeks, he has accumulated a total of 8,201 ETH, worth 15.81 million USD (average price 1,928 USD).

ChainCatcher news, according to official sources, T3 FCU (T3 Financial Crime Unit) announced today that it has frozen $9 million in funds related to the Bybit hacker.Tether CEO Paolo Ardoino stated that Tether is committed to stopping the actions of criminals. By closely collaborating with T3 FCU, as well as other partners and global law enforcement agencies, it will ensure that stablecoin technology is not only transformative but also secure, transparent, and difficult to exploit.

ChainCatcher news, according to monitoring by The Data Nerd, 8 hours ago, a wallet possibly belonging to Bybit deposited 22,000 ETH (worth about 45.35 million USD) to Binance, which may be a repayment from Bybit to Binance after the hacking incident. Last week, the wallet also deposited another 22,000 ETH to Binance.

ChainCatcher news, according to Whale Alert monitoring, the Bybit exchange has seen four large ETH transfers in a short period, totaling 120,000 ETH (approximately $241 million) transferred to an unknown wallet, with each transaction amounting to 30,000 ETH.Previous news, 30,000 ETH was transferred from Bybit to an unknown wallet, valued at approximately $60.48 million.

ChainCatcher news, according to Whale Alert monitoring, approximately 30,000 ETH (worth about $60.475 million) was transferred from Bybit exchange to an unknown wallet at 16:39.

ChainCatcher news, Bybit co-founder Ben Zhou released the latest summary regarding the stolen funds. It is reported that out of a total of $1.4 billion (approximately 500,000 ETH) in stolen funds, 88.87% is still traceable, 7.59% has gone missing, and 3.54% is frozen.The report shows that 86.29% of the stolen funds (approximately 440,000 ETH, worth $1.23 billion) have been converted into 12,836 BTC, distributed across 9,117 wallets, with an average of 1.41 BTC per wallet. The hackers have begun using BTC mixers such as Wasabi, CryptoMixer, Railgun, and TornadoCash to transfer funds, with 193 BTC primarily flowing to the Wasabi mixer, which were then dispersed to multiple P2P traders.Ben Zhou stated that decoding mixer transactions has become the biggest challenge currently faced and called for more bounty hunters to participate in tracking and decoding efforts. In the past 30 days, the platform received 5,012 bounty reports, of which 63 were valid reports.

ChainCatcher news, according to on-chain analyst The Data Nerd, an early investor/team member of Avalon deposited 3.5 million AVL tokens (approximately 1.58 million USD) to the Bybit exchange 7 hours ago.The wallet currently still holds 6 million AVL tokens (approximately 2.55 million USD).

ChainCatcher news, Bybit CEO Ben Zhou responded to the concerns regarding the Launchpool project OIK token dump: "The budget for OIK's launchpool activity was a total of 10 million tokens provided by the project party, of which 3.3 million have been distributed, with over 90,000 users participating in the activity. The launchpool is still ongoing and will conclude on March 19, with 5.7 million tokens yet to be distributed.Bybit has never sold off activity budgets for profit; such market manipulation has serious legal consequences, and the budget is all in hot wallets, which can be audited by any regulatory authority. Currently, it appears that there are indeed large holders selling OIK in the market, and the compliance department is investigating the specific details. In the future, we are considering allowing the community to have a more direct view of our budget situation by using independent wallets to receive project budgets, enabling the community to see everything transparently."It is reported that previously some community users raised concerns: "It is inferred that Bybit is using its own Launchpool as a cash machine. The TGE of SpaceNation, which has been built for a year, was a failure. However, over the past three days, the community has gone from outrage to resentment to questioning and investigation, and has collected some evidence. A community sold less than 5% of the project, yet the project party absorbed an abnormal circulation volume within 30 minutes of the opening."

ChainCatcher message, according to @ai_9684xtpa monitoring, the Grass team's associated address withdrew $6.27 million worth of GRASS from Bybit 11 hours ago.The tokens have now been transferred to the address HMy1Z...QxrzT, which previously received 10 million tokens distributed from the Grass team's multi-signature address before the TGE, and has been gradually deposited into the trading platform over the past 4 months.

ChainCatcher news, Bybit CEO Ben Zhou posted on the X platform that the large-scale liquidation of ETH by whales with 50x leverage on Hyperliquid essentially utilized the platform's liquidation engine to exit. CEX also faces the same challenges; when whales are liquidated, the CEX liquidation engine also takes over positions. Reducing the overall leverage ratio is one method and may be the most effective one, but doing so can harm the business, as users always want to achieve higher leverage. Additionally, while deploying tools like dynamic risk limit mechanisms can be considered—such as reducing the total leverage ratio based on the total position size as the position grows—this won't fundamentally solve the problem if users utilize multiple accounts.If DEXs wish to provide high leverage services in the long term and avoid situations similar to the 50x leverage whales utilizing the platform's liquidation engine to exit on Hyperliquid, they may need to attempt CEX-level risk management, such as market monitoring to identify abusers and market manipulators. It will be interesting to follow the developments of this matter, as it may drive innovation in liquidation mechanisms.

ChainCatcher message, Bybit CEO BEN responds to OKX Star: "We have not made any statements regarding this Bloomberg article; it should just be based on the facts shown by on-chain data. When we saw some funds flowing to OKX web3, we contacted the OKX web3 team and requested assistance in tracking the funds' whereabouts. Your team responded and provided us with the logic, allowing us to continue tracking most of the funds. What the hackers did was use multiple cross-chain bridges to convert ETH to BTC, with Thor being the largest cross-chain bridge they used. I hope this clarifies things."