Cladious - Advanced Blockchain Security & Analysis Platform

Overview

Project Scope

Analysis of wallet 0xe4c28096025a90b9b37b1736a14650ed963081a0 - Lazarus High Risk Bybit Hacking Investigation

Suspicious Wallet Hash

0xe4c28096025a90b9b37b1736a14650ed963081a0

This is the primary wallet address being investigated in this report.

Methodology

Research Methodology

Automated Analysis Methodology for Wallet 0xe4c28096025a90b9b37b1736a14650ed963081a0 1. Data Collection - Automated transaction retrieval from blockchain - Historical transaction pattern analysis - Network connection mapping 2. Analysis Algorithms - Multi-algorithm approach using 22 detection methods - Statistical anomaly detection - Behavioral pattern analysis - Network-based risk assessment 3. Risk Scoring - Weighted risk factor calculation - Multi-dimensional analysis - Historical comparison baseline - Real-time pattern detection 4. Report Generation - Automated findings compilation - Risk level determination - Recommendation synthesis - Compliance-ready documentation

Data Collection

Data Collection Process for 0xe4c28096025a90b9b37b1736a14650ed963081a0 1. Blockchain Data Retrieval - Retrieved 22 analysis data points - Collected complete transaction history - Gathered network connection data 2. Analysis Processing - Applied multiple detection algorithms - Performed statistical analysis - Generated risk indicators - Created behavioral profiles 3. Quality Assurance - Data validation checks - Algorithm consistency verification - Result accuracy confirmation

Data Preprocessing

Data Preprocessing Steps: 1. Data Cleaning - Removed duplicate transactions - Standardized timestamp formats - Validated transaction data integrity 2. Feature Engineering - Created time-based features - Calculated statistical metrics - Generated network features 3. Normalization - Applied consistent scaling - Handled missing values - Optimized for analysis algorithms

Design Pattern

No design pattern information is available for this report.

Analysis

General Analysis Summary for 0xe4c28096025a90b9b37b1736a14650ed963081a0

Risk Level: Very High Risk Score: 100/100 Total Issues Identified: 79 Suspicious Transactions: 22

Key Findings: - Automated analysis detected 22 suspicious transactions - Risk assessment indicates very high risk level - 79 total suspicious patterns identified across all algorithms - Standardized risk score: 100/100

Analysis Confidence: High (automated multi-algorithm approach) Recommendation: Immediate investigation required

No suspicious patterns detected.

0xcd1d4178ae18d0afdb39fcc7e2c64c1fcffc6be1dbd2e82490c221128e646d52: Very short time between transactions 0xfec86065b18513bc4d5bf9c45bd0a2079464635c914fa5fe2778aa7e29b77989: Very short time between transactions 0xc9c21249a264f6c0742618d5535e2e587dfd32a5071d2e7970d740293721d4fd: Very short time between transactions 0xa468e32e513cdb82f6d978519dbdea5c3ca228e27f6647b2b076197afea39854: Very short time between transactions 0xe8e9c6473b4254cfbdfa12b84e4ef0705a83bce5dd1866e262dfa0f4d3877445: Very short time between transactions 0x0f197afb8bfeca89b0b6167f8b1735f7e11a8e7006cb4be78ac749079e596030: Very short time between transactions 0xc03544b9c712dc9cf0ca1a5f7675fee5df371c1b33308b918cf27026ceb5bd95: Very short time between transactions 0xfd01885cd4e038d595bba0c591110439f7a4fc6161b645f877ac7091cd928446: Very short time between transactions 0x8fb8d86578b6ab13a7829d48b5b2bcc76cccba3cfd52eb7e13aaea4efd623a27: Very short time between transactions 0x2369a50c75a9bbc9eb8cafe15aa469ba44541795c96378227c3e70a9a99d9b32: Very short time between transactions 0x4cd5215b40224ddf636f378ee065e309c2502e7f8343cf0a633484c31bb879b8: Very short time between transactions 0xafba4ee75c04e5e32fc0e1e4b54cda523046075dd7f67e6166392ffbf4703c0f: Very short time between transactions 0xc43526d41f140d8dd8a4ced8fe52ee25d3d639599b1a10b3f1f528ba59381386: Very short time between transactions 0xac78c1f921761259c5b53649dbdce599626b88fb190373c615f49836ad0f2331: Very short time between transactions 0x051171a76ebad7c2d145d4476e794f7021b37f47df2dc46cfa178d989e3922a6: Very short time between transactions 0x0759e395a93bddfdfbc6298e38ccb87a16320cb28a3a8ac2550bd377813a6dd6: Very short time between transactions 0x8bcc34dbda2a6043901c0871ca0bb28f80ddf544ae1c0c54eb4e9562310431a1: Very short time between transactions 0xa0f94e1d9fbd86cb1a008a2e25520bd97f884bd9b5e1e98153c795843bf7d837: Very short time between transactions 0x82452341f326e1b9fd2dc8e1e4d0bf7caaf409acf210e995e28054a1067ef8b7: Very short time between transactions 0x1ea2067db7c032c98ad8adca5939ffb31e266c3edf49135003ff28c83b31a222: Very short time between transactions

0xcd1d4178ae18d0afdb39fcc7e2c64c1fcffc6be1dbd2e82490c221128e646d52: High frequency transactions (less than 1 minute interval) 0xc9c21249a264f6c0742618d5535e2e587dfd32a5071d2e7970d740293721d4fd: Regular interval transactions between the same wallets 0xa468e32e513cdb82f6d978519dbdea5c3ca228e27f6647b2b076197afea39854: Regular interval transactions between the same wallets, High frequency transactions (less than 1 minute interval) 0x0f197afb8bfeca89b0b6167f8b1735f7e11a8e7006cb4be78ac749079e596030: High frequency transactions (less than 1 minute interval) 0xc03544b9c712dc9cf0ca1a5f7675fee5df371c1b33308b918cf27026ceb5bd95: High frequency transactions (less than 1 minute interval) 0xfd01885cd4e038d595bba0c591110439f7a4fc6161b645f877ac7091cd928446: High frequency transactions (less than 1 minute interval) 0x8fb8d86578b6ab13a7829d48b5b2bcc76cccba3cfd52eb7e13aaea4efd623a27: High frequency transactions (less than 1 minute interval) 0x2369a50c75a9bbc9eb8cafe15aa469ba44541795c96378227c3e70a9a99d9b32: High frequency transactions (less than 1 minute interval) 0xc43526d41f140d8dd8a4ced8fe52ee25d3d639599b1a10b3f1f528ba59381386: High frequency transactions (less than 1 minute interval) 0x051171a76ebad7c2d145d4476e794f7021b37f47df2dc46cfa178d989e3922a6: Regular interval transactions between the same wallets, High frequency transactions (less than 1 minute interval) 0x8bcc34dbda2a6043901c0871ca0bb28f80ddf544ae1c0c54eb4e9562310431a1: High frequency transactions (less than 1 minute interval) 0x82452341f326e1b9fd2dc8e1e4d0bf7caaf409acf210e995e28054a1067ef8b7: High frequency transactions (less than 1 minute interval) 0x1ea2067db7c032c98ad8adca5939ffb31e266c3edf49135003ff28c83b31a222: High frequency transactions (less than 1 minute interval)

Summary

Total Suspicious Transactions

22

Average Risk Score

100.0

Top Tags

Suspicious Transactions

Transaction Hash	Network	Risk Score	Risk Factors	Tags
`0xcd1d417…`	—	100 High	Low transaction fee Related to 131 high-risk transactions (highest score: 100) Sends funds to exploit address: 0x40e98f... Anomaly detected by Isolation Forest Repetitive transaction amount High volume of small transactions to the same wallet Transaction involves DeFi exploit address: Bybit Exploiter 6	No tags
`0xc43526d…`	—	100 High	Sends funds to exploit address: 0x660bfc... Low transaction fee Anomaly detected by Isolation Forest Very short time between transactions Transaction involves DeFi exploit address: Bybit Exploiter 9 Related to 135 high-risk transactions (highest score: 100) Outgoing structuring detected: 6 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0xe8e9c64…`	—	100 High	Transaction involves DeFi exploit address: Bybit Exploiter 42 Low transaction fee Related to 140 high-risk transactions (highest score: 100) Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Sends funds to exploit address: 0xe69753... Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0xc9c2124…`	—	100 High	Low transaction fee Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 40 Related to 157 high-risk transactions (highest score: 100) Repetitive transaction amount High volume of small transactions to the same wallet Sends funds to exploit address: 0x9ef428...	No tags
`0xa468e32…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 40 Related to 157 high-risk transactions (highest score: 100) Repetitive transaction amount High volume of small transactions to the same wallet Sends funds to exploit address: 0x9ef428...	No tags
`0x0759e39…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 39 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Related to 148 high-risk transactions (highest score: 100) Repetitive transaction amount High volume of small transactions to the same wallet Sends funds to exploit address: 0xd3c611...	No tags
`0x8bcc34d…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 39 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Related to 148 high-risk transactions (highest score: 100) Repetitive transaction amount High volume of small transactions to the same wallet Sends funds to exploit address: 0xd3c611...	No tags
`0x8fb8d86…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Sends funds to exploit address: 0xf30257... Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Transaction involves DeFi exploit address: Bybit Exploiter 45 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Related to 101 high-risk transactions (highest score: 100)	No tags
`0xfec8606…`	—	100 High	Sends funds to exploit address: 0x723a70... Transaction involves DeFi exploit address: Bybit Exploiter 49 Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Related to 124 high-risk transactions (highest score: 100)	No tags
`0xc03544b…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 51 Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 5 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Sends funds to exploit address: 0xeb0baa... Outgoing structuring detected: 4 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Related to 111 high-risk transactions (highest score: 100)	No tags
`0x1ea2067…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 52 Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 5 similar amounts totaling 0.00 Related to 130 high-risk transactions (highest score: 100) Outgoing structuring detected: 9 similar amounts totaling 0.00 Outgoing structuring detected: 4 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Sends funds to exploit address: 0xf03afb... Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Outgoing structuring detected: 3 similar amounts totaling 0.00	No tags
`0x4cd5215…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 5 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Outgoing structuring detected: 4 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Sends funds to exploit address: 0x55cca2... Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 53 Repetitive transaction amount High volume of small transactions to the same wallet Related to 124 high-risk transactions (highest score: 100) Outgoing structuring detected: 3 similar amounts totaling 0.00	No tags
`0x48738bf…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 51 Sends funds to exploit address: 0xeb0baa... Anomaly detected by Isolation Forest Repetitive transaction amount High volume of small transactions to the same wallet Related to 111 high-risk transactions (highest score: 100)	No tags
`0xfd01885…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 17 Related to 144 high-risk transactions (highest score: 100) Anomaly detected by Isolation Forest Very short time between transactions High volume of small transactions to the same wallet High frequency transactions (less than 1 minute interval) Sends funds to exploit address: 0xf0a166...	No tags
`0xa0f94e1…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Related to 149 high-risk transactions (highest score: 100) Transaction involves DeFi exploit address: Bybit Exploiter 43 Repetitive transaction amount High volume of small transactions to the same wallet Sends funds to exploit address: 0xe9bc55...	No tags
`0xafba4ee…`	—	100 High	Sends funds to exploit address: 0x660bfc... Low transaction fee Anomaly detected by Isolation Forest Transaction involves DeFi exploit address: Bybit Exploiter 9 Related to 135 high-risk transactions (highest score: 100) Outgoing structuring detected: 6 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0x051171a…`	—	100 High	Low transaction fee Outgoing structuring detected: 9 similar amounts totaling 0.00 Transaction involves DeFi exploit address: Bybit Exploiter 41 Anomaly detected by Isolation Forest Sends funds to exploit address: 0xbde2cc... Outgoing structuring detected: 6 similar amounts totaling 0.00 Related to 125 high-risk transactions (highest score: 100) Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0xac78c1f…`	—	100 High	Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Transaction involves DeFi exploit address: Bybit Exploiter 44 Very short time between transactions Sends funds to exploit address: 0xbca02b... Related to 153 high-risk transactions (highest score: 100) Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0x012cbd3…`	—	100 High	Sends funds to exploit address: 0x1512fc... Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Transaction involves DeFi exploit address: Bybit Exploiter 50 Related to 153 high-risk transactions (highest score: 100) Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0x2369a50…`	—	100 High	Sends funds to exploit address: 0x1512fc... Low transaction fee Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Transaction involves DeFi exploit address: Bybit Exploiter 50 Related to 153 high-risk transactions (highest score: 100) Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet	No tags
`0x0f197af…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 51 Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 5 similar amounts totaling 0.00 Outgoing structuring detected: 9 similar amounts totaling 0.00 Sends funds to exploit address: 0xeb0baa... Anomaly detected by Isolation Forest Very short time between transactions Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Related to 111 high-risk transactions (highest score: 100)	No tags
`0x8245234…`	—	100 High	Low transaction fee Transaction involves DeFi exploit address: Bybit Exploiter 52 Outgoing structuring detected: 8 similar amounts totaling 0.00 Outgoing structuring detected: 7 similar amounts totaling 0.00 Outgoing structuring detected: 5 similar amounts totaling 0.00 Related to 130 high-risk transactions (highest score: 100) Outgoing structuring detected: 9 similar amounts totaling 0.00 Outgoing structuring detected: 4 similar amounts totaling 0.00 Anomaly detected by Isolation Forest Very short time between transactions Sends funds to exploit address: 0xf03afb... Outgoing structuring detected: 6 similar amounts totaling 0.00 Outgoing structuring detected: 10 similar amounts totaling 0.00 Repetitive transaction amount High volume of small transactions to the same wallet Outgoing structuring detected: 3 similar amounts totaling 0.00	No tags

Showing 1 to 10 of 0 transactions

Advanced Analysis Findings

No Local Outlier Factor analysis data is available for this report.

No wallet community detection data is available for this report.

No transaction layering pattern data is available for this report.

No address clustering data is available for this report.

No sanctioned address connection data is available for this report.

Suspicious Activities

Suspicious Activities Summary: High Risk Activities: 22 Medium Risk Activities: 0 Total Flagged Transactions: 22 Pattern Categories: - Network-based anomalies - Behavioral inconsistencies - Statistical outliers - Temporal irregularities Automated Detection Results: - Algorithm coverage: Comprehensive - Detection confidence: High - Risk classification: Validated

Conclusions & Recommendations

Conclusions

Analysis Conclusions for 0xe4c28096025a90b9b37b1736a14650ed963081a0: 1. Risk Assessment - Overall Risk Level: Very High - Standardized Risk Score: 100/100 - Average Transaction Risk Score: 100.00 - Total Suspicious Patterns: 22 2. Key Findings - Automated analysis completed successfully - Multiple detection algorithms applied - Comprehensive risk evaluation performed - Standardized scoring methodology applied (score: 100/100) 3. Confidence Level - Analysis Quality: High - Data Coverage: Complete - Algorithm Performance: Validated 4. Summary The automated analysis has identified significant concerns. Immediate action recommended.

Recommendations

Immediate Action Recommendations: 1. Priority Actions - Escalate to compliance team immediately - Implement enhanced monitoring - Consider transaction restrictions - Document all findings 2. Investigation Requirements - Detailed transaction review required - Source of funds investigation - Enhanced due diligence protocols - Regular monitoring updates 3. Compliance Measures - File suspicious activity reports if required - Implement know-your-customer procedures - Apply enhanced monitoring protocols - Document risk mitigation measures

Severity Assessment

Very High

Appendices & References

Appendices

Appendix A: Automated Analysis Results Appendix B: Algorithm Details and Methodology Appendix C: Risk Assessment Matrix Appendix D: Transaction Pattern Analysis Appendix E: Network Connection Analysis Appendix F: Case Reference Documentation - CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001 Appendix G: Investigation Team Notes - Cladious Forensics Team

References

1. Blockchain Analysis Framework - Cladious Platform 2. Risk Assessment Guidelines - Financial Action Task Force (FATF) 3. Automated Analysis Documentation - Internal Methodology

Corporate

Blog

Social

Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0xe4c2...81a0

Overview

Project Scope

Suspicious Wallet Hash

Methodology

Research Methodology

Data Collection

Data Preprocessing

Design Pattern

Analysis

Summary

Suspicious Transactions

Advanced Analysis Findings

Suspicious Activities

Conclusions & Recommendations

Conclusions

Recommendations

Severity Assessment

Appendices & References

Appendices

References

Report Information

Corporate

Blog

Social

Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0xe4c2...81a0

Overview

Project Scope

Suspicious Wallet Hash

Methodology

Research Methodology

Data Collection

Data Preprocessing

Design Pattern

Analysis

Summary

Suspicious Transactions

CSV Download Options

Advanced Analysis Findings

Suspicious Activities

Conclusions & Recommendations

Conclusions

Recommendations

Severity Assessment

Appendices & References

Appendices

References

Report Information

Share this report