Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →On-chain investigator ZachXBT says he spent $349,700 in USDC posing as a client of an alleged laundering operation to trace funds connected to the February 2025 Bybit hack. His account, reported by The Block and Decrypt, describes a cluster of more than $12 million in Bybit-linked assets and a reported 442,000 USDT freeze. Those details remain allegations about an intermediary network; the FBI separately attributed the Bybit theft itself to North Korea.
How ZachXBT says he got inside the operation
According to The Block, ZachXBT began looking into the activity after seeing more than 15 accounts in public Telegram and Discord groups seeking help with orders involving stolen funds after the Bybit exploit. He posed as a customer and funded a new Ethereum address with $349,700 USDC to transact with an operator using the pseudonym “Jimmy Green.” The amount was investigative money he said he put at risk, not money recovered for victims.
Decrypt dates the initial funding to March 6, 2025, and reports that ZachXBT completed several further transactions to build trust. He said Jimmy later discussed moving Bybit funds for the DPRK before that movement occurred and described activity in Hong Kong and mainland China. These are details from ZachXBT’s account as reported by the publications, not independently established findings about Jimmy’s identity or the operation’s structure.
In March, Jimmy reportedly supplied an address for exchanging USDC into USDT on Tron. ZachXBT said that address had received gas from a wallet directly traceable to Bybit exploit funds and appeared on Bybit’s public exploit blacklist. Decrypt reproduced his description of the personal risk: “For this case, I fronted $349.7K and lost 5% on each order, with no guarantee Jimmy wouldn’t disappear with the funds, and an unknown amount of personal risk from dealing with the syndicate.”
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
What he says the on-chain trail showed
ZachXBT reportedly connected a bridge screenshot Jimmy sent on March 12 to a THORChain order created within minutes, matching the amounts and timing. He also said three Solana addresses supplied by Jimmy helped him identify a cluster of more than $12 million in Bybit exploit funds moving across Bitcoin, Ethereum, Solana and Tron. The Block and Decrypt reported that Tether later froze 442,000 USDT linked to the cluster.
A separate BlockSec tracker entry records a USDT freeze event on March 14, 2025 for one displayed Ethereum address. That address-level record is narrower than the broader cluster claim and does not, by itself, establish the cluster’s total value.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
ZachXBT also reportedly said Jimmy’s reference to roughly $300,000 frozen in 2024 matched 332,000 USDC from the Poloniex exploit. Another claimed check involved about $3 million in fraud proceeds that reportedly traced to a Huione Guarantee hot wallet. The Block and Decrypt attribute both points to ZachXBT’s account; they are not independent findings about the alleged network.
What is official—and what remains an allegation
On February 26, 2025, the FBI’s Internet Crime Complaint Center (IC3) stated that North Korea was responsible for stealing approximately $1.5 billion in virtual assets from Bybit on or about February 21, 2025. The FBI calls the activity “TraderTraitor” and said the actors rapidly converted some stolen assets into Bitcoin and other virtual assets dispersed across thousands of addresses on multiple blockchains. Read the FBI/IC3 announcement.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
That notice supports the official DPRK attribution for the theft. It does not establish the identity or full scale of the Chinese intermediary network alleged by ZachXBT, or validate every detail of his infiltration account. The Block reported that ZachXBT said he shared findings with law enforcement immediately but delayed public disclosure because the investigation was sensitive. The available reporting does not provide a public case number, law enforcement confirmation of the specific alleged network, or a court finding about its members.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to read the reported figures
- $349,700 USDC: the amount ZachXBT said he fronted to pose as a client, according to 2026 reporting by The Block and Decrypt.
- About 5% per order: the loss ZachXBT said he accepted on each order, as reported by those outlets.
- More than $12 million: the value of a Bybit-linked cluster he said he identified; it is a tracing claim, not a court-established accounting.
- 442,000 USDT: the amount The Block and Decrypt reported Tether froze in connection with the cluster.
- More than $1 billion: a laundering volume attributed to ZachXBT in reporting by The Block and Cointelegraph. It is an allegation, not an independently verified total.
- $75 million in freezes since 2022: the amount ZachXBT reportedly said he helped action in DPRK-related incidents, as reported by The Block and Decrypt.
- Approximately $1.5 billion stolen from Bybit: the amount in the FBI’s February 2025 official attribution of the theft to North Korea.
Decrypt reproduced ZachXBT’s summary: “Posing as a client, I gathered intel that helped action freezes for the Feb 2025 Bybit exploit and attribute illicit activity onchain.” The distinction matters: tracing and freezing assets linked to a theft can provide useful investigative leads, but they do not by themselves prove who controlled every address or establish criminal responsibility in court.
Quick Recap
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
