Bybit hackers may be behind Solana memecoin scams — ZachXBT

Cointelegraph

The Lazarus Group, the primary suspect behind the $1.4 billion Bybit hack, may also be linked to recent Solana memecoin scams, including rug pulls on the Pump.fun platform, according to onchain investigator ZachXBT.

The crypto industry was rocked by the largest hack in history on Feb. 21, when Bybit lost over $1.4 billion in liquid-staked Ether (stETH), Mantle Staked ETH (mETH) and other digital assets.

Blockchain security firms, including Arkham Intelligence, have identified North Korea’s Lazarus Group as the likely culprit behind the Bybit exploit.

The same entity laundering the hacked Bybit funds may also be responsible for some of the recent memecoin launches on Solana’s Pump.fun, according to ZachXBT.

“On Feb 22 the attacker received $1.08M from the Bybit hack to 0x363908df2b0890e7e5c1e403935133094287d7d1 who bridged USDC to Solana,” ZachXBT wrote in in a Feb. 23 Telegram post.

The $1 million was then consolidated across multiple wallets on Solana, some of which had previous links to memecoin scams, the investigator added.

“I made 920+ addresses receiving funds tied to the Bybit hack public and noticed a person laundering for Lazarus Group previously launched meme coins via Pump Fun,” he said.

Onchain findings from ZachXBT also revealed that the same Lazarus Group-affiliated wallets suspected in the Bybit hack were also behind the $29 million Phemex hack in January.

Solana plagued by memecoins scams, rug pulls

The Lazarus Group’s connection to Solana’s Pump.fun platform is not surprising, given the recent wave of memecoin scams on the Solana blockchain.

Investor sentiment took a hit after the rise and fall of the Libra (LIBRA) token, which was endorsed by Argentine President Javier Milei. The project’s insiders allegedly siphoned over $107 million worth of liquidity in a rug pull, triggering a 94% price collapse within hours and wiping out $4 billion in investor capital.

The rate of monthly capital inflow into Solana (SOL) and Solana’s MEME index turned to a monthly negative of -5.9%, according to a Glassnode chart shared with Cointelegraph.

Solana user activity is also in decline. The number of active addresses on the network fell to a weekly average of 9.5 million in February, down nearly 40% from the 15.6 million active addresses in November 2024.

This marks a significant cooldown for the blockchain, according to CryptoVizArt, a senior analyst at Glassnode.

The analyst told Cointelegraph:

“A significant cool down in Solana activity is evident, however, we are relatively higher than pre pre-bull market baseline of

Solana’s advanced technology has attracted its fair share of bad actors and cases of insider corruption, despite the technology being neutral in itself.

However, these issues may turn into a net positive for Solana’s growth in the long term, according to a Feb. 18 X post from blockchain researcher Aylo.

Risk Warnings and Disclaimers

You understand and acknowledge that there is a high degree of risk involved in trading. Following any strategies or investment methods may lead to potential losses. The content on the site is provided by our contributors and analysts for information purposes only. You are solely responsible for determining whether any trading assets, securities, strategy, or any other product is suitable for investing based on your own investment objectives and financial situation.

Risk Disclosure

The risk of loss in trading financial instruments such as stocks, FX, commodities, futures, bonds, ETFs and crypto can be substantial. You may sustain a total loss of the funds that you deposit with your broker. Therefore, you should carefully consider whether such trading is suitable for you in light of your circumstances and financial resources.

No decision to invest should be made without thoroughly conducting due diligence by yourself or consulting with your financial advisors. Our web content might not suit you since we don't know your financial conditions and investment needs. Our financial information might have latency or contain inaccuracy, so you should be fully responsible for any of your trading and investment decisions. The company will not be responsible for your capital loss.

Without getting permission from the website, you are not allowed to copy the website's graphics, texts, or trademarks. Intellectual property rights in the content or data incorporated into this website belong to its providers and exchange merchants.

Recent Searches

Top Searches

Markets

Analysis

User

24/7

Economic Calendar

Education

Data

Bybit hackers may be behind Solana memecoin scams — ZachXBT

Risk Disclosure