Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0x403b...9d13
Published
14 Jul 2025
16 views
Wallet Name
Analysis Target Wallet (CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001) - 0x403b...9d13
Overview
Project Scope
Analysis of wallet 0x403bc8f71268dc881003184c1916d028883c9d13 - Lazarus High Risk Bybit Hacking Investigation
Suspicious Wallet Hash
0x403bc8f71268dc881003184c1916d028883c9d13
This is the primary wallet address being investigated in this report.
Methodology
Research Methodology
Automated Analysis Methodology for Wallet 0x403bc8f71268dc881003184c1916d028883c9d13
1. Data Collection
- Automated transaction retrieval from blockchain
- Historical transaction pattern analysis
- Network connection mapping
2. Analysis Algorithms
- Multi-algorithm approach using 17 detection methods
- Statistical anomaly detection
- Behavioral pattern analysis
- Network-based risk assessment
3. Risk Scoring
- Weighted risk factor calculation
- Multi-dimensional analysis
- Historical comparison baseline
- Real-time pattern detection
4. Report Generation
- Automated findings compilation
- Risk level determination
- Recommendation synthesis
- Compliance-ready documentation
Data Collection
Data Collection Process for 0x403bc8f71268dc881003184c1916d028883c9d13
1. Blockchain Data Retrieval
- Retrieved 17 analysis data points
- Collected complete transaction history
- Gathered network connection data
2. Analysis Processing
- Applied multiple detection algorithms
- Performed statistical analysis
- Generated risk indicators
- Created behavioral profiles
3. Quality Assurance
- Data validation checks
- Algorithm consistency verification
- Result accuracy confirmation
Data Preprocessing
Data Preprocessing Steps:
1. Data Cleaning
- Removed duplicate transactions
- Standardized timestamp formats
- Validated transaction data integrity
2. Feature Engineering
- Created time-based features
- Calculated statistical metrics
- Generated network features
3. Normalization
- Applied consistent scaling
- Handled missing values
- Optimized for analysis algorithms
Design Pattern
No design pattern information is available for this report.
Analysis
General Analysis Summary for 0x403bc8f71268dc881003184c1916d028883c9d13
Risk Level: Very High Risk Score: 100/100 Total Issues Identified: 65 Suspicious Transactions: 17
Key Findings: - Automated analysis detected 17 suspicious transactions - Risk assessment indicates very high risk level - 65 total suspicious patterns identified across all algorithms - Standardized risk score: 100/100
Analysis Confidence: High (automated multi-algorithm approach) Recommendation: Immediate investigation required
No suspicious patterns detected.
0x29dc852ee67fd03eb3a34ae661acf60cbced8270636d02bf25f74785ad648f0e: Very short time between transactions
0xd86f74fb0c46981ffed5f424ef4734fa55bf6c5d177e901d82add99bd412705f: Very short time between transactions
0xfdd57d96872e9e1775747f8f8f126cd72505aa2cdf1bab31dcff3e774fbfe6a7: Very short time between transactions
0x605705001281d3bb939408343c1ae55da634446e55867571e19d017cf9414a89: Very short time between transactions
0xc2e730edc762f1143dfa1f8f1893c4b9bcf0e1cb1248544fc2a52ae6c1f619a2: Very short time between transactions
0xc53e3a64533b373150e474849f286e6a0d7b876fb951fefdbc2434c5269a38ec: Very short time between transactions
0x7ead4aec9c1198458c135ac5510385a9011f5d28cbfa337ed78d2df9d6733b9f: Very short time between transactions
0xaa85fa19da3109559f8415e316b00677eb11967cc354d1bed3270c9b31499782: Very short time between transactions
0xcabab0991474ad5770470cef21491f99eb5a0a9147c67e901acb309137e79ce8: Very short time between transactions
0x7b41a540b5c1141989ff31966254ae5998ea408c3ee68ade76f173ed7bcf2534: Very short time between transactions
0x2b1ee746e85fd1ca85a799772faccac603abff1085a440134e17181993afe678: Very short time between transactions
0x1d07f1e66d726626cad3966787954649f860ad0e41b7dca2f9ad182110fde57c: Very short time between transactions
0x49ccb4517cb3365261b1874f46a2c655e9f5e5dd5d7409f118dfa5111bd1f53f: Very short time between transactions
0x9527fdc95b6fdc766ea73f14bc7262961abd1d71fa503ea2d8b12e1d86d351ee: Very short time between transactions
0x8e477bc05c3fcc05e01468f10c7a87af45160b211db33788767c4fc7768c66b8: Very short time between transactions
0xe1e6e67939fd840ae3f4a2d94ccdc7e7c865a4cd2d47a6b1179132d49fa20917: Very short time between transactions
0x29dc852ee67fd03eb3a34ae661acf60cbced8270636d02bf25f74785ad648f0e: High frequency transactions (less than 1 minute interval)
0xd86f74fb0c46981ffed5f424ef4734fa55bf6c5d177e901d82add99bd412705f: Regular interval transactions between the same wallets, High frequency transactions (less than 1 minute interval)
0xfdd57d96872e9e1775747f8f8f126cd72505aa2cdf1bab31dcff3e774fbfe6a7: High frequency transactions (less than 1 minute interval)
0x605705001281d3bb939408343c1ae55da634446e55867571e19d017cf9414a89: High frequency transactions (less than 1 minute interval)
0xc2e730edc762f1143dfa1f8f1893c4b9bcf0e1cb1248544fc2a52ae6c1f619a2: High frequency transactions (less than 1 minute interval)
0xc53e3a64533b373150e474849f286e6a0d7b876fb951fefdbc2434c5269a38ec: High frequency transactions (less than 1 minute interval)
0x7ead4aec9c1198458c135ac5510385a9011f5d28cbfa337ed78d2df9d6733b9f: High frequency transactions (less than 1 minute interval)
0xaa85fa19da3109559f8415e316b00677eb11967cc354d1bed3270c9b31499782: High frequency transactions (less than 1 minute interval)
0xcabab0991474ad5770470cef21491f99eb5a0a9147c67e901acb309137e79ce8: High frequency transactions (less than 1 minute interval)
0x2b1ee746e85fd1ca85a799772faccac603abff1085a440134e17181993afe678: High frequency transactions (less than 1 minute interval)
0x1d07f1e66d726626cad3966787954649f860ad0e41b7dca2f9ad182110fde57c: High frequency transactions (less than 1 minute interval)
0x49ccb4517cb3365261b1874f46a2c655e9f5e5dd5d7409f118dfa5111bd1f53f: High frequency transactions (less than 1 minute interval)
0x9527fdc95b6fdc766ea73f14bc7262961abd1d71fa503ea2d8b12e1d86d351ee: High frequency transactions (less than 1 minute interval)
0xe1e6e67939fd840ae3f4a2d94ccdc7e7c865a4cd2d47a6b1179132d49fa20917: High frequency transactions (less than 1 minute interval)
Summary
Total Suspicious Transactions
17
Average Risk Score
97.24
Top Tags
No tags
Suspicious Transactions
| Transaction Hash | Network | Risk Score | Risk Factors | Tags |
|---|---|---|---|---|
0x7b41a54…
|
— |
100
High
|
Short time frame between transactions
Sends funds to exploit address: 0xfc9266...
High volume of small transactions to the same wallet
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Related to 63 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 22
|
No tags
|
0x7ef9d4c…
|
— |
100
High
|
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 26
High volume of small transactions to the same wallet
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x83c767...
Very short time between transactions
Related to 45 high-risk transactions (highest score: 100)
|
No tags
|
0xd86f74f…
|
— |
100
High
|
Short time frame between transactions
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 9 similar amounts totaling 0.00
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0xc2e730e…
|
— |
100
High
|
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0x7ead4ae…
|
— |
100
High
|
Short time frame between transactions
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 5 similar amounts totaling 0.00
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
Outgoing structuring detected: 4 similar amounts totaling 0.00
|
No tags
|
0xaa85fa1…
|
— |
100
High
|
Short time frame between transactions
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 5 similar amounts totaling 0.00
Outgoing structuring detected: 3 similar amounts totaling 0.00
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
Outgoing structuring detected: 4 similar amounts totaling 0.00
|
No tags
|
0xfdd57d9…
|
— |
100
High
|
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 9 similar amounts totaling 0.00
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 8 similar amounts totaling 0.00
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0x8e477bc…
|
— |
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 26
High volume of small transactions to the same wallet
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Sends funds to exploit address: 0x83c767...
Related to 45 high-risk transactions (highest score: 100)
|
No tags
|
0xe1e6e67…
|
— |
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 26
High volume of small transactions to the same wallet
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Sends funds to exploit address: 0x83c767...
Related to 45 high-risk transactions (highest score: 100)
|
No tags
|
0x1d07f1e…
|
— |
100
High
|
Short time frame between transactions
Sends funds to exploit address: 0xfc9266...
High volume of small transactions to the same wallet
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Related to 63 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 22
|
No tags
|
0x49ccb45…
|
— |
53
Medium
|
High volume of small transactions to the same wallet
Anomaly detected by Isolation Forest
Related to 6 high-risk transactions (highest score: 82)
Low transaction fee
Part of suspicious wallet community
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x6057050…
|
— |
100
High
|
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0xc53e3a6…
|
— |
100
High
|
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Regular interval transactions between the same wallets
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Low transaction fee
Repetitive transaction amount
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 5 similar amounts totaling 0.00
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0xcabab09…
|
— |
100
High
|
Short time frame between transactions
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Repetitive transaction amount
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Outgoing structuring detected: 5 similar amounts totaling 0.00
Outgoing structuring detected: 3 similar amounts totaling 0.00
Outgoing structuring detected: 8 similar amounts totaling 0.00
Very short time between transactions
Outgoing structuring detected: 10 similar amounts totaling 0.00
Outgoing structuring detected: 4 similar amounts totaling 0.00
|
No tags
|
0x9527fdc…
|
— |
100
High
|
Sends funds to exploit address: 0x83ef5e...
High volume of small transactions to the same wallet
Outgoing structuring detected: 7 similar amounts totaling 0.00
Outgoing structuring detected: 6 similar amounts totaling 0.00
Outgoing structuring detected: 5 similar amounts totaling 0.00
Outgoing structuring detected: 9 similar amounts totaling 0.00
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Related to 41 high-risk transactions (highest score: 100)
Outgoing structuring detected: 3 similar amounts totaling 0.00
Outgoing structuring detected: 8 similar amounts totaling 0.00
Transaction involves DeFi exploit address: Bybit Exploiter 28
Outgoing structuring detected: 10 similar amounts totaling 0.00
Outgoing structuring detected: 4 similar amounts totaling 0.00
|
No tags
|
0x29dc852…
|
— |
100
High
|
High volume of small transactions to the same wallet
Related to 59 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 32
Low transaction fee
Part of suspicious wallet community
Sends funds to exploit address: 0x96244d...
Transaction amount doubled compared to previous transaction
Outgoing structuring detected: 10 similar amounts totaling 0.00
|
No tags
|
0x2b1ee74…
|
— |
100
High
|
Sends funds to exploit address: 0xfc9266...
High volume of small transactions to the same wallet
Low transaction fee
Part of suspicious wallet community
Repetitive transaction amount
Related to 63 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 22
|
No tags
|
Showing 1 to 10 of 0 transactions
Advanced Analysis Findings
No Local Outlier Factor analysis data is available for this report.
No wallet community detection data is available for this report.
No transaction layering pattern data is available for this report.
No address clustering data is available for this report.
No sanctioned address connection data is available for this report.
Suspicious Activities
Suspicious Activities Summary:
High Risk Activities: 17
Medium Risk Activities: 0
Total Flagged Transactions: 17
Pattern Categories:
- Network-based anomalies
- Behavioral inconsistencies
- Statistical outliers
- Temporal irregularities
Automated Detection Results:
- Algorithm coverage: Comprehensive
- Detection confidence: High
- Risk classification: Validated
Conclusions & Recommendations
Conclusions
Analysis Conclusions for 0x403bc8f71268dc881003184c1916d028883c9d13:
1. Risk Assessment
- Overall Risk Level: Very High
- Standardized Risk Score: 100/100
- Average Transaction Risk Score: 97.24
- Total Suspicious Patterns: 17
2. Key Findings
- Automated analysis completed successfully
- Multiple detection algorithms applied
- Comprehensive risk evaluation performed
- Standardized scoring methodology applied (score: 100/100)
3. Confidence Level
- Analysis Quality: High
- Data Coverage: Complete
- Algorithm Performance: Validated
4. Summary
The automated analysis has identified significant concerns.
Immediate action recommended.
Recommendations
Immediate Action Recommendations:
1. Priority Actions
- Escalate to compliance team immediately
- Implement enhanced monitoring
- Consider transaction restrictions
- Document all findings
2. Investigation Requirements
- Detailed transaction review required
- Source of funds investigation
- Enhanced due diligence protocols
- Regular monitoring updates
3. Compliance Measures
- File suspicious activity reports if required
- Implement know-your-customer procedures
- Apply enhanced monitoring protocols
- Document risk mitigation measures
Severity Assessment
Very High
Appendices & References
Appendices
Appendix A: Automated Analysis Results
Appendix B: Algorithm Details and Methodology
Appendix C: Risk Assessment Matrix
Appendix D: Transaction Pattern Analysis
Appendix E: Network Connection Analysis
Appendix F: Case Reference Documentation - CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Appendix G: Investigation Team Notes - Cladious Forensics Team
References
1. Blockchain Analysis Framework - Cladious Platform
2. Risk Assessment Guidelines - Financial Action Task Force (FATF)
3. Automated Analysis Documentation - Internal Methodology
Report Information
Author
Cladious Auto
Published Date
July 14, 2025
Views
16
Likes
0