Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0xfdf7...d3ac
Published
16 Jul 2025
8 views
Wallet Name
Analysis Target Wallet (CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001) - 0xfdf7...d3ac
Overview
Project Scope
Analysis of wallet 0xfdf7c47fe20e762f955bd0b34168145877c8d3ac - Lazarus High Risk Bybit Hacking Investigation
Suspicious Wallet Hash
0xfdf7c47fe20e762f955bd0b34168145877c8d3ac
This is the primary wallet address being investigated in this report.
Methodology
Research Methodology
Automated Analysis Methodology for Wallet 0xfdf7c47fe20e762f955bd0b34168145877c8d3ac
1. Data Collection
- Automated transaction retrieval from blockchain
- Historical transaction pattern analysis
- Network connection mapping
2. Analysis Algorithms
- Multi-algorithm approach using 31 detection methods
- Statistical anomaly detection
- Behavioral pattern analysis
- Network-based risk assessment
3. Risk Scoring
- Weighted risk factor calculation
- Multi-dimensional analysis
- Historical comparison baseline
- Real-time pattern detection
4. Report Generation
- Automated findings compilation
- Risk level determination
- Recommendation synthesis
- Compliance-ready documentation
Data Collection
Data Collection Process for 0xfdf7c47fe20e762f955bd0b34168145877c8d3ac
1. Blockchain Data Retrieval
- Retrieved 31 analysis data points
- Collected complete transaction history
- Gathered network connection data
2. Analysis Processing
- Applied multiple detection algorithms
- Performed statistical analysis
- Generated risk indicators
- Created behavioral profiles
3. Quality Assurance
- Data validation checks
- Algorithm consistency verification
- Result accuracy confirmation
Data Preprocessing
Data Preprocessing Steps:
1. Data Cleaning
- Removed duplicate transactions
- Standardized timestamp formats
- Validated transaction data integrity
2. Feature Engineering
- Created time-based features
- Calculated statistical metrics
- Generated network features
3. Normalization
- Applied consistent scaling
- Handled missing values
- Optimized for analysis algorithms
Design Pattern
No design pattern information is available for this report.
Analysis
General Analysis Summary for 0xfdf7c47fe20e762f955bd0b34168145877c8d3ac
Risk Level: Very High Risk Score: 100/100 Total Issues Identified: 122 Suspicious Transactions: 31
Key Findings: - Automated analysis detected 31 suspicious transactions - Risk assessment indicates very high risk level - 122 total suspicious patterns identified across all algorithms - Standardized risk score: 100/100
Analysis Confidence: High (automated multi-algorithm approach) Recommendation: Immediate investigation required
No suspicious patterns detected.
0x373e94bf7a6c9636788f3e20be83e8359157d3aba5845ba89323e539e29eb2d6: Very short time between transactions
0x191034523d99b63c10757e5dc5e479fa6f11069a2872c6aff4c8c744a1ae8957: Very short time between transactions
0xa3697033373b43509ddc775a5d416510fd5294e41945667190034f5e6bb32d9c: Very short time between transactions
0xb825036172d7bc893bc3bce7ba645c49a3d336f5d7f557531c962db111df8226: Very short time between transactions
0x3c115de1f6cc55c4e19706b4ad8ebdc9aae8c61d36dcedf7fd407e64f43e7251: Very short time between transactions
0xdade0f0e95f891f74606f4375e67406b26c1f7b5615aec5f0f4c5650486dc1a0: Very short time between transactions
0x0439f5a6d21021f60acda1dd43dc8e614e3fdcec7fe4c3c69931e6f70ff4cdfb: Very short time between transactions
0x0ed1a010d1772f98f31e6ae9909d854246642d7f16ca8b0948e76d22a2e67ffb: Very short time between transactions
0xce01a8f8a35956f3e1c8ebccfdd11b7094d9da5f7aa4b220e38fef108f0c0939: Very short time between transactions
0x66e890b3b295eca7b2823b220969f5c31a7350ea8c1e14acc2dcf28a75e095c4: Very short time between transactions
0x8d47d363a3974964bb0a90246f0be4b7f4849582418f0cb12ed919758bbafac4: Very short time between transactions
0x9f1db26d6ce76cdd6de16e7995cae333c3b2359e751368266158341e7e6e75b7: Very short time between transactions
0xe01ede35bd99305df78c2454116a14b53ad2365250b7d21c088006deb8e9b5b4: Very short time between transactions
0x2bc376187a979084cf22dc82e7c3160ec0ba4cb6d049e71c0739f706c574c72e: Very short time between transactions
0x1f8a59ce2401ae44ce1e2a4be311e88780ac4a7c94f0f7b86dfa49588e05be63: Very short time between transactions
0xb4d904bcd00ef47550336d90bc0210075a59ac663b2b53fcf7680cf75f3cf03e: Very short time between transactions
0x9aec8e41d88f00293e223806b359783d62d11598f653748af22fb07eb06fe414: Very short time between transactions
0x7dd7ec03db69bc8625be54de05820d3215c20248bac54aec386e09a6cb6bea73: Very short time between transactions
0xe7eb6e4a80ee0ef4e672998a7f00da4a451cce5e475769c4349038df82fd13dd: Very short time between transactions
0x4b4e9d33764f6d51d7d51e8161491a68e5c89da4314cde5dad7f1354ac20f6e3: Very short time between transactions
0xdd559fd6e031267bf43aef39bfdf0a83568d9cd05ed9cae6d7b5f843392641d9: Very short time between transactions
0x6c7fb3b302fb67dabe2c3dd08ee3deb4116afc60deaaa99753cb5f3122ff6b87: Very short time between transactions
0x09531c45ef211fa325a0fd121ab2fe0ce95ca4083ebc593a59ce54fa85b20ca0: Very short time between transactions
0xbdffb2137ddd610745e9603d88893cf4c3391040d6c54b904228dbf43ce60229: Very short time between transactions
0xbbd766646eb72743d75d735d5fcdeba8c8a0dfc4f53886cf09b01fd2f9c0d15a: Very short time between transactions
0x3840da478db33d4fdcf3d7ade04edb644e835b9330bb34ce3cb3f72423b8c137: Very short time between transactions
0x4e35fb612162a96df2ec1e839747cd9a3bc2fc1838a3f13ede8b8f0188cfcc97: Very short time between transactions
0x87843701e0aa9b82a82915cba3d62ad07324305f75b8c2d0e81d98f45d2d4f96: Very short time between transactions
0x255beb71a950cf03963bc239719b130ec3c7819e441148e171fc69d7d552c957: Very short time between transactions
0x191034523d99b63c10757e5dc5e479fa6f11069a2872c6aff4c8c744a1ae8957: Transaction amount doubled compared to previous transaction
0xb825036172d7bc893bc3bce7ba645c49a3d336f5d7f557531c962db111df8226: Transaction amount doubled compared to previous transaction
0x0439f5a6d21021f60acda1dd43dc8e614e3fdcec7fe4c3c69931e6f70ff4cdfb: Transaction amount doubled compared to previous transaction
0xa1d82baa6c1703c6daec5fd36612de3c99cfc3855af29501abd978ec17721c46: Transaction amount doubled compared to previous transaction
0x34bba60b8274e4df621531608dbc56fdefd6979070352c9708dc2daf2fb0dbb2: Transaction amount doubled compared to previous transaction
0x8d47d363a3974964bb0a90246f0be4b7f4849582418f0cb12ed919758bbafac4: Transaction amount significantly lower than average
0x9f1db26d6ce76cdd6de16e7995cae333c3b2359e751368266158341e7e6e75b7: Transaction amount halved compared to previous transaction
0xe01ede35bd99305df78c2454116a14b53ad2365250b7d21c088006deb8e9b5b4: Transaction amount halved compared to previous transaction
0x2bc376187a979084cf22dc82e7c3160ec0ba4cb6d049e71c0739f706c574c72e: Transaction amount halved compared to previous transaction
0xe7eb6e4a80ee0ef4e672998a7f00da4a451cce5e475769c4349038df82fd13dd: Transaction amount halved compared to previous transaction
0x4b4e9d33764f6d51d7d51e8161491a68e5c89da4314cde5dad7f1354ac20f6e3: Transaction amount significantly lower than average
0x09531c45ef211fa325a0fd121ab2fe0ce95ca4083ebc593a59ce54fa85b20ca0: Transaction amount halved compared to previous transaction
0xbbd766646eb72743d75d735d5fcdeba8c8a0dfc4f53886cf09b01fd2f9c0d15a: Transaction amount halved compared to previous transaction
0x255beb71a950cf03963bc239719b130ec3c7819e441148e171fc69d7d552c957: Transaction amount significantly lower than average
0x373e94bf7a6c9636788f3e20be83e8359157d3aba5845ba89323e539e29eb2d6: High frequency transactions (less than 1 minute interval)
0x191034523d99b63c10757e5dc5e479fa6f11069a2872c6aff4c8c744a1ae8957: High frequency transactions (less than 1 minute interval)
0xa3697033373b43509ddc775a5d416510fd5294e41945667190034f5e6bb32d9c: Regular interval transactions between the same wallets, High frequency transactions (less than 1 minute interval)
0xb825036172d7bc893bc3bce7ba645c49a3d336f5d7f557531c962db111df8226: High frequency transactions (less than 1 minute interval)
0x3c115de1f6cc55c4e19706b4ad8ebdc9aae8c61d36dcedf7fd407e64f43e7251: High frequency transactions (less than 1 minute interval)
0xdade0f0e95f891f74606f4375e67406b26c1f7b5615aec5f0f4c5650486dc1a0: High frequency transactions (less than 1 minute interval)
0x0439f5a6d21021f60acda1dd43dc8e614e3fdcec7fe4c3c69931e6f70ff4cdfb: High frequency transactions (less than 1 minute interval)
0x0ed1a010d1772f98f31e6ae9909d854246642d7f16ca8b0948e76d22a2e67ffb: High frequency transactions (less than 1 minute interval)
0xce01a8f8a35956f3e1c8ebccfdd11b7094d9da5f7aa4b220e38fef108f0c0939: High frequency transactions (less than 1 minute interval)
0x66e890b3b295eca7b2823b220969f5c31a7350ea8c1e14acc2dcf28a75e095c4: High frequency transactions (less than 1 minute interval)
0x8d47d363a3974964bb0a90246f0be4b7f4849582418f0cb12ed919758bbafac4: High frequency transactions (less than 1 minute interval)
0x9f1db26d6ce76cdd6de16e7995cae333c3b2359e751368266158341e7e6e75b7: High frequency transactions (less than 1 minute interval)
0xe01ede35bd99305df78c2454116a14b53ad2365250b7d21c088006deb8e9b5b4: High frequency transactions (less than 1 minute interval)
0x2bc376187a979084cf22dc82e7c3160ec0ba4cb6d049e71c0739f706c574c72e: High frequency transactions (less than 1 minute interval)
0x1f8a59ce2401ae44ce1e2a4be311e88780ac4a7c94f0f7b86dfa49588e05be63: High frequency transactions (less than 1 minute interval)
0xb4d904bcd00ef47550336d90bc0210075a59ac663b2b53fcf7680cf75f3cf03e: High frequency transactions (less than 1 minute interval)
0x9aec8e41d88f00293e223806b359783d62d11598f653748af22fb07eb06fe414: High frequency transactions (less than 1 minute interval)
0x7dd7ec03db69bc8625be54de05820d3215c20248bac54aec386e09a6cb6bea73: High frequency transactions (less than 1 minute interval)
0xe7eb6e4a80ee0ef4e672998a7f00da4a451cce5e475769c4349038df82fd13dd: High frequency transactions (less than 1 minute interval)
0x4b4e9d33764f6d51d7d51e8161491a68e5c89da4314cde5dad7f1354ac20f6e3: High frequency transactions (less than 1 minute interval)
0xdd559fd6e031267bf43aef39bfdf0a83568d9cd05ed9cae6d7b5f843392641d9: High frequency transactions (less than 1 minute interval)
0x6c7fb3b302fb67dabe2c3dd08ee3deb4116afc60deaaa99753cb5f3122ff6b87: High frequency transactions (less than 1 minute interval)
0x09531c45ef211fa325a0fd121ab2fe0ce95ca4083ebc593a59ce54fa85b20ca0: High frequency transactions (less than 1 minute interval)
0xbdffb2137ddd610745e9603d88893cf4c3391040d6c54b904228dbf43ce60229: High frequency transactions (less than 1 minute interval)
0xbbd766646eb72743d75d735d5fcdeba8c8a0dfc4f53886cf09b01fd2f9c0d15a: High frequency transactions (less than 1 minute interval)
0x3840da478db33d4fdcf3d7ade04edb644e835b9330bb34ce3cb3f72423b8c137: High frequency transactions (less than 1 minute interval)
0x4e35fb612162a96df2ec1e839747cd9a3bc2fc1838a3f13ede8b8f0188cfcc97: High frequency transactions (less than 1 minute interval)
0x87843701e0aa9b82a82915cba3d62ad07324305f75b8c2d0e81d98f45d2d4f96: High frequency transactions (less than 1 minute interval)
0x255beb71a950cf03963bc239719b130ec3c7819e441148e171fc69d7d552c957: High frequency transactions (less than 1 minute interval)
Suspicious Transactions
| Transaction Hash | Risk Score | Risk Factors |
|---|---|---|
0x0ed1a01…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Transaction involves DeFi exploit address: Bybit Exploiter 21
Outgoing structuring detected: 3 similar amounts totaling 261.18
Rapid accumulation of large transactions
Very short time between transactions
Related to 180 high-risk transactions (highest score: 100)
Receives funds from exploit address: 0xb72334...
|
0xce01a8f…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction involves DeFi exploit address: Bybit Exploiter 21
Outgoing structuring detected: 3 similar amounts totaling 261.18
Rapid accumulation of large transactions
Short time frame between transactions
Very short time between transactions
Related to 180 high-risk transactions (highest score: 100)
High frequency transactions (less than 1 minute interval)
Receives funds from exploit address: 0xb72334...
|
0x373e94b…
|
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 15
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
|
0xa369703…
|
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 15
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
|
0xe7eb6e4…
|
35
Medium
|
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
|
0x09531c4…
|
37
Medium
|
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Outgoing structuring detected: 5 similar amounts totaling 445.81
Rapid accumulation of large transactions
Short time frame between transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 8 similar amounts totaling 704.43
High frequency transactions (less than 1 minute interval)
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 11 similar amounts totaling 958.97
|
0x3c115de…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Transaction involves DeFi exploit address: Bybit Exploiter 15
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Outgoing structuring detected: 3 similar amounts totaling 273.44
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
High frequency transactions (less than 1 minute interval)
|
0xbbd7666…
|
48
High
|
Outgoing structuring detected: 3 similar amounts totaling 273.44
Low transaction fee
Large transaction amount
Anomaly detected by Isolation Forest
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Short time frame between transactions
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
Outgoing structuring detected: 5 similar amounts totaling 445.81
Outgoing structuring detected: 4 similar amounts totaling 358.81
Rapid accumulation of large transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 11 similar amounts totaling 958.97
|
0xdade0f0…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Transaction involves DeFi exploit address: Bybit Exploiter 15
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Outgoing structuring detected: 3 similar amounts totaling 273.44
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
|
0x9f1db26…
|
37
Medium
|
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Very short time between transactions
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
High frequency transactions (less than 1 minute interval)
|
0xe01ede3…
|
36
Medium
|
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
|
0x2bc3761…
|
49
High
|
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
High frequency transactions (less than 1 minute interval)
Outgoing structuring detected: 11 similar amounts totaling 958.97
|
0xb4d904b…
|
49
High
|
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
|
0x1910345…
|
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 15
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
|
0x9aec8e4…
|
35
Medium
|
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Related to high-risk transaction ['0xaa0c5c7084a06644de5bd24bb78692ce8e0ef5f23e9a6deb87ae90e9ddbc861d'] (score: 85)
Short time frame between transactions
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
Outgoing structuring detected: 9 similar amounts totaling 794.58
|
0x7dd7ec0…
|
35
Medium
|
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
|
0x1f8a59c…
|
44
High
|
Low transaction fee
Transaction amount significantly lower than average
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Transaction amount halved compared to previous transaction
High frequency transactions (less than 1 minute interval)
|
0xdd559fd…
|
39
Medium
|
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Rapid accumulation of large transactions
Short time frame between transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 8 similar amounts totaling 704.43
High frequency transactions (less than 1 minute interval)
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 11 similar amounts totaling 958.97
|
0xb825036…
|
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 15
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
|
0xbdffb21…
|
36
Medium
|
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Outgoing structuring detected: 5 similar amounts totaling 445.81
Outgoing structuring detected: 4 similar amounts totaling 358.81
Rapid accumulation of large transactions
Short time frame between transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
|
0x4b4e9d3…
|
30
Medium
|
Low transaction fee
Transaction amount significantly lower than average
Short time frame between transactions
Very short time between transactions
Transaction amount halved compared to previous transaction
High frequency transactions (less than 1 minute interval)
|
0x6c7fb3b…
|
38
Medium
|
Low transaction fee
Transaction amount significantly lower than average
Regular interval transactions between the same wallets
Short time frame between transactions
Very short time between transactions
Transaction amount halved compared to previous transaction
High frequency transactions (less than 1 minute interval)
|
0x3840da4…
|
50
High
|
Outgoing structuring detected: 3 similar amounts totaling 273.44
Low transaction fee
Large transaction amount
Anomaly detected by Isolation Forest
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Outgoing structuring detected: 11 similar amounts totaling 958.97
Short time frame between transactions
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
Outgoing structuring detected: 5 similar amounts totaling 445.81
Outgoing structuring detected: 4 similar amounts totaling 358.81
Rapid accumulation of large transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
High frequency transactions (less than 1 minute interval)
|
0x0439f5a…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Transaction involves DeFi exploit address: Bybit Exploiter 15
Receives funds from exploit address: 0x229093...
Rapid accumulation of large transactions
Outgoing structuring detected: 3 similar amounts totaling 273.44
Short time frame between transactions
Very short time between transactions
Related to 197 high-risk transactions (highest score: 100)
|
0x4e35fb6…
|
36
Medium
|
Outgoing structuring detected: 6 similar amounts totaling 529.43
Outgoing structuring detected: 10 similar amounts totaling 876.59
Low transaction fee
Large transaction amount
Outgoing structuring detected: 13 similar amounts totaling 1135.54
Outgoing structuring detected: 5 similar amounts totaling 445.81
Outgoing structuring detected: 4 similar amounts totaling 358.81
Rapid accumulation of large transactions
Outgoing structuring detected: 3 similar amounts totaling 273.44
Short time frame between transactions
Outgoing structuring detected: 7 similar amounts totaling 614.43
Very short time between transactions
Outgoing structuring detected: 12 similar amounts totaling 1046.79
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
Outgoing structuring detected: 11 similar amounts totaling 958.97
Outgoing structuring detected: 9 similar amounts totaling 794.58
Outgoing structuring detected: 8 similar amounts totaling 704.43
|
0x8784370…
|
36
Medium
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Transaction amount significantly lower than average
Short time frame between transactions
Very short time between transactions
Multiple round number transactions
Repetitive transaction amount
|
0x255beb7…
|
27
Medium
|
Low transaction fee
Transaction amount significantly lower than average
Short time frame between transactions
Very short time between transactions
Multiple round number transactions
Repetitive transaction amount
|
0x34bba60…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction involves DeFi exploit address: Bybit Exploiter 21
Anomaly detected by Isolation Forest
Very short time between transactions
Related to 180 high-risk transactions (highest score: 100)
High frequency transactions (less than 1 minute interval)
Receives funds from exploit address: 0xb72334...
|
0x66e890b…
|
43
High
|
Low transaction fee
Large transaction amount
Short time frame between transactions
Anomaly detected by Isolation Forest
Very short time between transactions
Outgoing structuring detected: 15 similar amounts totaling 1296.25
|
0xa1d82ba…
|
100
High
|
Local Outlier Factor (LOF) detected as anomaly
Low transaction fee
Large transaction amount
Transaction amount doubled compared to previous transaction
Transaction involves DeFi exploit address: Bybit Exploiter 21
Outgoing structuring detected: 3 similar amounts totaling 261.18
Short time frame between transactions
Very short time between transactions
Related to 180 high-risk transactions (highest score: 100)
High frequency transactions (less than 1 minute interval)
Receives funds from exploit address: 0xb72334...
|
0x8d47d36…
|
29
Medium
|
Low transaction fee
Large transaction amount
Short time frame between transactions
Very short time between transactions
Outgoing structuring detected: 15 similar amounts totaling 1296.25
Outgoing structuring detected: 14 similar amounts totaling 1220.15
|
Showing 1 to 10 of 0 transactions
Advanced Analysis Findings
No Local Outlier Factor analysis data is available for this report.
No wallet community detection data is available for this report.
No transaction layering pattern data is available for this report.
No address clustering data is available for this report.
No sanctioned address connection data is available for this report.
Suspicious Activities
Suspicious Activities Summary:
High Risk Activities: 31
Medium Risk Activities: 0
Total Flagged Transactions: 31
Pattern Categories:
- Network-based anomalies
- Behavioral inconsistencies
- Statistical outliers
- Temporal irregularities
Automated Detection Results:
- Algorithm coverage: Comprehensive
- Detection confidence: High
- Risk classification: Validated
Conclusions & Recommendations
Conclusions
Analysis Conclusions for 0xfdf7c47fe20e762f955bd0b34168145877c8d3ac:
1. Risk Assessment
- Overall Risk Level: Very High
- Standardized Risk Score: 100/100
- Average Transaction Risk Score: 60.29
- Total Suspicious Patterns: 31
2. Key Findings
- Automated analysis completed successfully
- Multiple detection algorithms applied
- Comprehensive risk evaluation performed
- Standardized scoring methodology applied (score: 100/100)
3. Confidence Level
- Analysis Quality: High
- Data Coverage: Complete
- Algorithm Performance: Validated
4. Summary
The automated analysis has identified significant concerns.
Immediate action recommended.
Recommendations
Immediate Action Recommendations:
1. Priority Actions
- Escalate to compliance team immediately
- Implement enhanced monitoring
- Consider transaction restrictions
- Document all findings
2. Investigation Requirements
- Detailed transaction review required
- Source of funds investigation
- Enhanced due diligence protocols
- Regular monitoring updates
3. Compliance Measures
- File suspicious activity reports if required
- Implement know-your-customer procedures
- Apply enhanced monitoring protocols
- Document risk mitigation measures
Severity Assessment
Very High
Appendices & References
Appendices
Appendix A: Automated Analysis Results
Appendix B: Algorithm Details and Methodology
Appendix C: Risk Assessment Matrix
Appendix D: Transaction Pattern Analysis
Appendix E: Network Connection Analysis
Appendix F: Case Reference Documentation - CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Appendix G: Investigation Team Notes - Cladious Forensics Team
References
1. Blockchain Analysis Framework - Cladious Platform
2. Risk Assessment Guidelines - Financial Action Task Force (FATF)
3. Automated Analysis Documentation - Internal Methodology
Contact Information
Primary Analyst: Cladious Auto
Email: [email protected]
Generated: 2025-07-16 02:55:46 UTC
Investigation Team: Cladious Forensics Team
Case Reference: CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Platform: Cladious Security Analysis Platform
For questions or additional analysis requests, please contact the investigation team.
This report contains confidential information and should be handled according to your organization's data protection policies.
Report Information
Author
Cladious Auto
Published Date
July 16, 2025
Views
8
Likes
0