{"id":32582,"date":"2025-03-20T10:59:30","date_gmt":"2025-03-20T10:59:30","guid":{"rendered":"https:\/\/www.duck9.com\/blog\/?p=32582"},"modified":"2025-03-20T06:59:44","modified_gmt":"2025-03-20T10:59:44","slug":"wordpressd-post-by-ben-zhou-on-hacked-funds-of-usd-1400000000","status":"publish","type":"post","link":"https:\/\/www.duck9.com\/blog\/wordpressd-post-by-ben-zhou-on-hacked-funds-of-usd-1400000000\/","title":{"rendered":"WordPress\u2019d Post by Ben Zhou on Hacked Funds of USD $1,400,000,000"},"content":{"rendered":"
\n
\n
<\/p>\n\n\n\n\n
 <\/td>\n<\/tr>\n
 <\/td>\n\n\n\n\n
<\/a><\/td>\n<\/td>\n\n\n\n\n\n\n\n\n\n\n
Ben Zhou<\/a><\/b><\/td>\n<\/tr>\n
\u2066\u202a@benbybit\u202c\u2069<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/tr>\n
3.20.25 Executive Summary on Hacked Funds:
Hacker started to use mixers: 1. Wasbi 2. CryptoMixer 3. Railgun 4. TornadoCash
Total hacked funds of USD 1.4bn around 500k ETH. 88.87% remain traceable, 7.59% have gone dark, 3.54% have been frozen.
Breakdown: – 86.29% (440,091 ETH,<\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n
3\/20\/25, 3:19\u202fAM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n <\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a><\/div>\n


<\/p>\n

\n
<\/p>\n\n\n\n\n
 <\/td>\n<\/tr>\n
 <\/td>\n\n\n\n\n
\"hOXTB0Wi_normal.jpg\"<\/a><\/td>\n\"spacer.png\"<\/td>\n\n\n\n\n\n\n\n\n\n\n
Fish4AI<\/a><\/b><\/td>\n<\/tr>\n
\u2066\u202a@Fish4AI\u202c\u2069<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n\"logo_twitter-1497383721365.png\"<\/td>\n<\/tr>\n
\"spacer_464x1-1582829598167.png\"<\/td>\n<\/tr>\n
\u2066\u202a@benbybit\u202c\u2069<\/a> Fascinating crypto forensics in action. $1.4B hack with 88.87% still traceable but mixer usage increasing – classic cat\/mouse game. <\/p>\n

Mixer decoding is critical bottleneck now. Reminds me of early Bitcoin days when privacy vs transparency balance was theoretical, not $1B+<\/td>\n<\/tr>\n

 <\/td>\n<\/tr>\n
3\/20\/25, 5:04\u202fAM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n <\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a><\/div>\n


<\/p>\n

\n
3.20.25 Executive Summary on Hacked Funds: <\/div>\n
Hacker started to use mixers: 1. Wasbi 2. CryptoMixer 3. Railgun 4. TornadoCash<\/div>\n
Total hacked funds of USD 1.4bn around 500k ETH. 88.87% remain traceable, 7.59% have gone dark, 3.54% have been frozen. <\/div>\n
Breakdown:  – 86.29%  (440,091 ETH, ~$1.23B) have been converted into 12,836 BTC  across 9,117 wallets (Average 1.41 BTC each). We notice that Hacker started to use BTC mixer. <\/div>\n
193 BTC went to mainly Wasabi Mixer. After mixer the funds went to various p2p vendors. We believe this trend will grow as more funds will go through mixers. Decoding mixer transactions is the no.1 challenge we face now. If you can help, please reach out.<\/div>\n
In the past 30 days, 5012 bounty reports were received of which 63 were valid bounty reports. We welcome more reports, we need more bounty hunters that can decode mixers as we need a lot of help there down the road. <\/div>\n
<\/div>\n
\"image0.jpeg\"\"image1.jpeg\"\"image2.jpeg\"\"image3.jpeg\"\"image4.jpeg\"\"image5.jpeg\"\"image6.jpeg\"\"image7.jpeg\"\"image8.jpeg\"\"image9.jpeg\"<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    Ben Zhou \u2066\u202a@benbybit\u202c\u2069 3.20.25 Executive Summary on Hacked Funds: Hacker started to use mixers: 1. Wasbi 2. CryptoMixer 3. Railgun 4. TornadoCashTotal hacked funds of USD 1.4bn around 500k ETH. 88.87% remain traceable, 7.59% have gone dark, 3.54% have been frozen. Breakdown: – 86.29% (440,091 ETH,   3\/20\/25, 3:19\u202fAM         […]<\/p>\n","protected":false},"author":1,"featured_media":32583,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-32582","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts\/32582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/comments?post=32582"}],"version-history":[{"count":0,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts\/32582\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/media\/32583"}],"wp:attachment":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/media?parent=32582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/categories?post=32582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/tags?post=32582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}