Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteBlockchain investigator ZachXBT alleges that a Chinese organized-crime network laundered more than $1 billion stolen in multiple crypto exploits for North Korea’s Lazarus Group. The figure and the network’s alleged role are not independently established findings. Reports published October 6, 2026, describe ZachXBT’s account of an undercover operation involving an intermediary known as “Jimmy Green” and a separate cluster of funds linked to the Bybit hack.
What ZachXBT alleges
Cointelegraph and The Block reported on October 6, 2026, that ZachXBT accused a Chinese organized-crime network of laundering more than $1 billion stolen in multiple cryptocurrency exploits for North Korea’s Lazarus Group. That is ZachXBT’s allegation as described by the outlets, not a judicial finding or independently verified total. The primary X thread linked in the reports was not accessible for review, and the reporting does not provide a complete forensic dataset.
The allegation concerns a network-wide total across multiple exploits. It should not be confused with the smaller Bybit-linked cluster ZachXBT said he identified, or with funds reportedly frozen in connection with that cluster.
How the reported undercover operation worked
Cointelegraph reported that ZachXBT said he posed as a paying client in February 2025, shortly after the Bybit hack. He reportedly interacted with a pseudonymous operator using the name “Jimmy Green,” put up $349,700 in stablecoins, and accepted a loss of about 5% per order to build trust. Cointelegraph’s October 6, 2026 report attributes those details to ZachXBT.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The Block reported that ZachXBT said he funded a new Ethereum address with 349,700 USDC. According to the report, Jimmy supplied an address for exchanging USDC into USDT on Tron, and ZachXBT said he traced the funding wallet to Bybit exploit funds. These account details are reported claims; the available coverage does not reproduce the underlying transaction records in full. The Block’s October 6, 2026 report describes the transaction account.
What the Bybit-linked figures mean
The reported figures describe different stages and scopes, not interchangeable measures of recovered money:
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
| Figure | What it refers to |
|---|---|
| More than $1 billion | The amount ZachXBT alleges the network laundered across multiple crypto exploits for Lazarus, as reported by Cointelegraph and The Block on October 6, 2026. It is not an adjudicated finding. |
| More than $12 million | A cluster of Bybit-linked funds that ZachXBT said information from the operator helped identify, according to The Block’s October 6, 2026 report. |
| 442,000 USDT | The amount The Block reported Tether later froze in connection with that cluster. This is a reported freeze, not the full cluster amount. |
| $75 million | The amount ZachXBT reportedly said he had helped facilitate freezes of in North Korean-related incidents since 2022, as of his October 2026 account. It is a broader cumulative figure, not the amount frozen from the Bybit-linked cluster. |
Identifying funds, freezing some funds, and alleging a much larger laundering total are distinct outcomes. A reported freeze does not by itself establish that all funds in a cluster were recovered or that the broader laundering allegation has been proven.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Was the $1 billion claim confirmed?
No. The October 6, 2026 reports attribute the more-than-$1-billion figure and the claimed Lazarus connection to ZachXBT. The primary thread and underlying evidence were not independently reviewed here, and the cited reports do not establish that a court or government agency has confirmed this specific network-wide claim. It is more accurate to describe it as an allegation than as a proven finding.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Historical U.S. cases show that North Korea-linked crypto laundering through Chinese intermediaries has been a subject of official action, but they do not verify ZachXBT’s newer allegation or identify the same people as part of his described network.
A 2020 Justice Department case
In March 2020, the U.S. Department of Justice announced charges against two Chinese nationals accused of laundering more than $100 million in cryptocurrency stolen by North Korean actors. The Justice Department explicitly cautioned that the charges were allegations and that the defendants were presumed innocent. The DOJ release concerns a separate case; it is context, not confirmation of the network ZachXBT describes.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
2023 Treasury sanctions
In April 2023, the U.S. Treasury Department said it sanctioned PRC-based OTC trader Wu Huihui and Hong Kong-based trader Cheng Hung Man for supporting DPRK malicious cyber activity. Treasury described their role as converting stolen cryptocurrency to fiat and routing payments. The announcement illustrates the kind of intermediary activity authorities have addressed in another case, but it does not establish a connection to Jimmy Green or ZachXBT’s alleged network. Treasury’s April 24, 2023 announcement includes Under Secretary Brian E. Nelson’s statement that illicit facilitation networks allow the DPRK to access the international financial system and generate revenue for its weapons programs.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What readers can and cannot conclude
- What is reported: ZachXBT says he posed as a client, interacted with an operator using the name Jimmy Green, and used information from that interaction to identify Bybit-linked funds.
- What is alleged: A Chinese organized-crime network laundered more than $1 billion for Lazarus across multiple exploits.
- What was reportedly frozen: The Block says Tether froze 442,000 USDT linked to a Bybit-related cluster exceeding $12 million.
- What remains unestablished: The network’s identity and size, the full scope of its alleged Lazarus work, and the complete evidentiary basis for the $1 billion figure.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →
