Bybit hackers may be behind Solana memecoin scams — ZachXBT

The Lazarus Group, the primary suspect behind the $1.4 billion Bybit hack, may also be linked to recent Solana memecoin scams, including rug pulls on the Pump.fun platform, according to onchain investigator ZachXBT.

The crypto industry was rocked by the largest hack in history on Feb. 21, when Bybit lost over $1.4 billion in liquid-staked Ether (stETH), Mantle Staked ETH (mETH) and other digital assets.

Blockchain security firms, including Arkham Intelligence, have identified North Korea’s Lazarus Group as the likely culprit behind the Bybit exploit.

The same entity laundering the hacked Bybit funds may also be responsible for some of the recent memecoin launches on Solana’s Pump.fun, according to ZachXBT.

“On Feb 22 the attacker received $1.08M from the Bybit hack to 0x363908df2b0890e7e5c1e403935133094287d7d1 who bridged USDC to Solana,” ZachXBT wrote in in a Feb. 23 Telegram post.

The $1 million was then consolidated across multiple wallets on Solana, some of which had previous links to memecoin scams, the investigator added.

“I made 920+ addresses receiving funds tied to the Bybit hack public and noticed a person laundering for Lazarus Group previously launched meme coins via Pump Fun,” he said.

Onchain findings from ZachXBT also revealed that the same Lazarus Group-affiliated wallets suspected in the Bybit hack were also behind the $29 million Phemex hack in January.

Solana plagued by memecoins scams, rug pulls

The Lazarus Group’s connection to Solana’s Pump.fun platform is not surprising, given the recent wave of memecoin scams on the Solana blockchain.

Investor sentiment took a hit after the rise and fall of the Libra (LIBRA) token, which was endorsed by Argentine President Javier Milei. The project’s insiders allegedly siphoned over $107 million worth of liquidity in a rug pull, triggering a 94% price collapse within hours and wiping out $4 billion in investor capital.

The rate of monthly capital inflow into Solana (SOL) and Solana’s MEME index turned to a monthly negative of -5.9%, according to a Glassnode chart shared with Cointelegraph.