Over 77% of the funds stolen in a record hack on Crypto Exchange Bybit remain traceable, while 20% are “gone dark” and are unusual, CEO Ben Zhou said in an update about X early Tuesday.

“This and the coming week is critical of freezing of funds as the funds will start clearing in exchanges, OTC and P2P,” Zhou said, referring to the hackers’ efforts to launder money and convert them into cash.

About 417,348 ether (ETH), valued for approx. $ 1 billion stays traced on blockchain after being moved using privacy -focused thorchain. Another 20% of the funds, approx. 79,655 ETH or $ 200 million, has “gone dark” through the Exch.

A minor part, 40,233 ETH or $ 100 million, had passed through OKX’s Web3 Proxy, but 23,553 ETH, worth $ 65 million, remain unusual.

Zhou said the hackers converted 83% of the stolen ETH – 361.255 ETH; Or $ 900 million – to BTC, which distributes it over 6,954 wallets, with an average of 1.71 BTC per year. Wallet using Thorchain.

Thorchain has treated $ 4.66 billion in swaps in the week ending March 2, the highest context on the record, according to Data Source Defillama – making it over $ 5.5 million in fees from the illegal currents.

North Korean hacking group Lazarus targeted citybit in late February by injecting malicious code into the Safewallet, a third -party wallet platform used by Exchange, to steal billions in customer assets from the Exchange.

The attackers compromised a developer’s device, enabling them to manipulate a routine wallet transfer and siphon of nearly $ 1.5 billion in ETH.

BYBIT fully returned to a 1: 1 backing of client assets days after the attack, which Coindesk previously reported. Address activity suggests that more than $ 400 million was purchased through trading over-the-counter, with an additional $ 300 million brought directly from stock exchanges.