Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0x69d3...77ff
Published
14 Jul 2025
5 views
Wallet Name
Analysis Target Wallet (CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001) - 0x69d3...77ff
Login to view LLM Analysis
Overview
Project Scope
Analysis of wallet 0x69d3dc90317a03ec1f1491332f86675bf3c277ff - Lazarus High Risk Bybit Hacking Investigation
Suspicious Wallet Hash
0x69d3dc90317a03ec1f1491332f86675bf3c277ff
This is the primary wallet address being investigated in this report.
Methodology
Research Methodology
Automated Analysis Methodology for Wallet 0x69d3dc90317a03ec1f1491332f86675bf3c277ff
1. Data Collection
- Automated transaction retrieval from blockchain
- Historical transaction pattern analysis
- Network connection mapping
2. Analysis Algorithms
- Multi-algorithm approach using 25 detection methods
- Statistical anomaly detection
- Behavioral pattern analysis
- Network-based risk assessment
3. Risk Scoring
- Weighted risk factor calculation
- Multi-dimensional analysis
- Historical comparison baseline
- Real-time pattern detection
4. Report Generation
- Automated findings compilation
- Risk level determination
- Recommendation synthesis
- Compliance-ready documentation
Data Collection
Data Collection Process for 0x69d3dc90317a03ec1f1491332f86675bf3c277ff
1. Blockchain Data Retrieval
- Retrieved 25 analysis data points
- Collected complete transaction history
- Gathered network connection data
2. Analysis Processing
- Applied multiple detection algorithms
- Performed statistical analysis
- Generated risk indicators
- Created behavioral profiles
3. Quality Assurance
- Data validation checks
- Algorithm consistency verification
- Result accuracy confirmation
Data Preprocessing
Data Preprocessing Steps:
1. Data Cleaning
- Removed duplicate transactions
- Standardized timestamp formats
- Validated transaction data integrity
2. Feature Engineering
- Created time-based features
- Calculated statistical metrics
- Generated network features
3. Normalization
- Applied consistent scaling
- Handled missing values
- Optimized for analysis algorithms
Design Pattern
No design pattern information is available for this report.
Analysis
General Analysis Summary for 0x69d3dc90317a03ec1f1491332f86675bf3c277ff
Risk Level: Very High Risk Score: 100/100 Total Issues Identified: 98 Suspicious Transactions: 25
Key Findings: - Automated analysis detected 25 suspicious transactions - Risk assessment indicates very high risk level - 98 total suspicious patterns identified across all algorithms - Standardized risk score: 100/100
Analysis Confidence: High (automated multi-algorithm approach) Recommendation: Immediate investigation required
No suspicious patterns detected.
0x27d92bdee27518a6a2ab78cb706be164e70c7415b0d9807c7acde67debc3e55d: Very short time between transactions
0x1e6ed96497a761545481d273554b3ec40ccc4caab4e47856b9db468c90f23eef: Very short time between transactions
0xcea99fdace40a31354c39e4cdff24c9074be72f9ae7546d7897f552bcf7ac557: Very short time between transactions
0x6297fc8fd87839cfa0abfa990b596df261e7db1645823a2b7ecfa61802a64a48: Very short time between transactions
0x2a6e3bf9dad1f1e4ad02ded31ebb84ed149bfab7eb7c439fb018a192917bf284: Very short time between transactions
0x9f2fd7d28d853856ddfa969dc5322979a7f29d4f149ca6cfe17d749790f108bc: Very short time between transactions
0x3c4b909da7e27b31e62799d959701ebbcf4c2b8470f94be3f99a5f5435b9498c: Very short time between transactions
0x5c648d3f12c1d4011a90656405c4f05a14b8e18f03baa5353149804fb15bf023: Very short time between transactions
0xfd061cdffdbec4e45da8b58e9e76dbb6d300642f8bcb43a16e87a4f117b3d4ed: Very short time between transactions
0xd05d84323641cba71bee9891db978dcff1c5d02a97687d6023f4e62c51580ba0: Very short time between transactions
0x2c3795a3b049136a3e00691abf93745ed9139ea162c8eac14b66d5f1ada5d40d: Very short time between transactions
0x351aec5b829876d265ccefe30867db3aab577f0a4a094b4e1d6ab57023035dfd: Very short time between transactions
0x29e02d0ed29d9651474c63980dcf83be985216dd1c7490f75c68ba6f74d42926: Very short time between transactions
0x60f14b1ccdd50eab405a4f56af78435b556883137606c7a8568c25c259426dcb: Very short time between transactions
0xc7fd355529f05041f41d4d8b69087e1243add9e289756c5d3fd7df50277a0406: Very short time between transactions
0x2e175606d7af8eb5afac7a90778b97212a32e3a360fcbfd3dd045f06fa95dd7a: Very short time between transactions
0xf85a2f98ede1b926d5f320c5db221dc074a331edc72515a065a518f1df627c2c: Very short time between transactions
0x7dc4b026b3798f4acb430323038500272cfafae6cb9e59e2a20d428886e7975a: Very short time between transactions
0x412b74580358f64a10b554f32bc8d40318988a686af1cf42a83b81be984df98c: Very short time between transactions
0xb8b436ac09675c5dc151fdaa7e56ed789c009036f602c20591bf075469f39490: Very short time between transactions
0x41f76918025b73634752ab08f688bc1e3e4c978eae11040477230d70569f08c8: Very short time between transactions
0x110be8ca353775aadaba9ac00de9ac25d659bf51386ceca561328de6b920e8d1: Very short time between transactions
0x9174df269d331b9952a2176bcbdba3be5c283f4c30a1c373dd841e07492be6e5: Very short time between transactions
0x27d92bdee27518a6a2ab78cb706be164e70c7415b0d9807c7acde67debc3e55d: Transaction amount significantly higher than average, Transaction amount doubled compared to previous transaction
0x7dc4b026b3798f4acb430323038500272cfafae6cb9e59e2a20d428886e7975a: Transaction amount significantly lower than average, Transaction amount halved compared to previous transaction
0xb8b436ac09675c5dc151fdaa7e56ed789c009036f602c20591bf075469f39490: Transaction amount doubled compared to previous transaction
0x41f76918025b73634752ab08f688bc1e3e4c978eae11040477230d70569f08c8: Transaction amount significantly lower than average, Transaction amount halved compared to previous transaction
0x9174df269d331b9952a2176bcbdba3be5c283f4c30a1c373dd841e07492be6e5: Transaction amount doubled compared to previous transaction
0x27d92bdee27518a6a2ab78cb706be164e70c7415b0d9807c7acde67debc3e55d: High frequency transactions (less than 1 minute interval)
0x1e6ed96497a761545481d273554b3ec40ccc4caab4e47856b9db468c90f23eef: High frequency transactions (less than 1 minute interval)
0xcea99fdace40a31354c39e4cdff24c9074be72f9ae7546d7897f552bcf7ac557: High frequency transactions (less than 1 minute interval)
0x6297fc8fd87839cfa0abfa990b596df261e7db1645823a2b7ecfa61802a64a48: High frequency transactions (less than 1 minute interval)
0x2a6e3bf9dad1f1e4ad02ded31ebb84ed149bfab7eb7c439fb018a192917bf284: High frequency transactions (less than 1 minute interval)
0x9f2fd7d28d853856ddfa969dc5322979a7f29d4f149ca6cfe17d749790f108bc: High frequency transactions (less than 1 minute interval)
0x3c4b909da7e27b31e62799d959701ebbcf4c2b8470f94be3f99a5f5435b9498c: High frequency transactions (less than 1 minute interval)
0x5c648d3f12c1d4011a90656405c4f05a14b8e18f03baa5353149804fb15bf023: High frequency transactions (less than 1 minute interval)
0xfd061cdffdbec4e45da8b58e9e76dbb6d300642f8bcb43a16e87a4f117b3d4ed: High frequency transactions (less than 1 minute interval)
0xd05d84323641cba71bee9891db978dcff1c5d02a97687d6023f4e62c51580ba0: High frequency transactions (less than 1 minute interval)
0x2c3795a3b049136a3e00691abf93745ed9139ea162c8eac14b66d5f1ada5d40d: High frequency transactions (less than 1 minute interval)
0x351aec5b829876d265ccefe30867db3aab577f0a4a094b4e1d6ab57023035dfd: High frequency transactions (less than 1 minute interval)
0x29e02d0ed29d9651474c63980dcf83be985216dd1c7490f75c68ba6f74d42926: High frequency transactions (less than 1 minute interval)
0x60f14b1ccdd50eab405a4f56af78435b556883137606c7a8568c25c259426dcb: High frequency transactions (less than 1 minute interval)
0xc7fd355529f05041f41d4d8b69087e1243add9e289756c5d3fd7df50277a0406: High frequency transactions (less than 1 minute interval)
0x2e175606d7af8eb5afac7a90778b97212a32e3a360fcbfd3dd045f06fa95dd7a: High frequency transactions (less than 1 minute interval)
0xf85a2f98ede1b926d5f320c5db221dc074a331edc72515a065a518f1df627c2c: High frequency transactions (less than 1 minute interval)
0x7dc4b026b3798f4acb430323038500272cfafae6cb9e59e2a20d428886e7975a: High frequency transactions (less than 1 minute interval)
0x412b74580358f64a10b554f32bc8d40318988a686af1cf42a83b81be984df98c: High frequency transactions (less than 1 minute interval)
0xb8b436ac09675c5dc151fdaa7e56ed789c009036f602c20591bf075469f39490: High frequency transactions (less than 1 minute interval)
0x41f76918025b73634752ab08f688bc1e3e4c978eae11040477230d70569f08c8: High frequency transactions (less than 1 minute interval)
0x110be8ca353775aadaba9ac00de9ac25d659bf51386ceca561328de6b920e8d1: High frequency transactions (less than 1 minute interval)
0x9174df269d331b9952a2176bcbdba3be5c283f4c30a1c373dd841e07492be6e5: High frequency transactions (less than 1 minute interval)
Summary
Total Suspicious Transactions
25
Average Risk Score
39.44
Top Tags
No tags
Suspicious Transactions
| Transaction Hash | Risk Score | Risk Factors | Tags |
|---|---|---|---|
0xcea99fd…
|
39
Medium
|
Short time frame between transactions
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount doubled compared to previous transaction
Related to 21 high-risk transactions (highest score: 100)
Very short time between transactions
|
No tags
|
0x2e17560…
|
62
High
|
Short time frame between transactions
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount significantly higher than user average
Local Outlier Factor (LOF) detected as anomaly
Regular interval transactions between the same wallets
Low transaction fee
Transaction amount doubled compared to previous transaction
Very short time between transactions
|
No tags
|
0xa5a2e05…
|
46
High
|
Anomaly detected by Isolation Forest
Rapid multi-hop layering pattern detected
Related to high-risk transaction ['0x5d5de30eec2d02689685240af6275979029bb5cac24908def984e1555fea6035'] (score: 81)
Low transaction fee
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x03b91af…
|
49
High
|
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount significantly higher than user average
Local Outlier Factor (LOF) detected as anomaly
Transaction amount doubled compared to previous transaction
Very short time between transactions
|
No tags
|
0x6297fc8…
|
25
Medium
|
Short time frame between transactions
Multiple round number transactions
Repetitive transaction amount
Related to 21 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0x2a6e3bf…
|
26
Medium
|
Short time frame between transactions
Multiple round number transactions
High frequency transactions (less than 1 minute interval)
Repetitive transaction amount
Related to 21 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0x9f2fd7d…
|
39
Medium
|
Short time frame between transactions
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount doubled compared to previous transaction
Related to 21 high-risk transactions (highest score: 100)
Very short time between transactions
|
No tags
|
0x3c4b909…
|
42
High
|
Multiple round number transactions
Rapid multi-hop layering pattern detected
Low transaction fee
Very short time between transactions
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x5c648d3…
|
43
High
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
Multiple round number transactions
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Repetitive transaction amount
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0xfd061cd…
|
25
Medium
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
Multiple round number transactions
Repetitive transaction amount
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0xd05d843…
|
47
High
|
Short time frame between transactions
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount significantly higher than user average
Low transaction fee
Transaction amount doubled compared to previous transaction
Very short time between transactions
|
No tags
|
0x2c3795a…
|
51
High
|
Short time frame between transactions
Transaction amount significantly higher than average
Related to 32 high-risk transactions (highest score: 97)
Anomaly detected by Isolation Forest
Transaction amount significantly higher than user average
Local Outlier Factor (LOF) detected as anomaly
Very short time between transactions
|
No tags
|
0x351aec5…
|
42
High
|
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Low transaction fee
Very short time between transactions
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x29e02d0…
|
45
High
|
Short time frame between transactions
Multiple round number transactions
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Low transaction fee
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0x60f14b1…
|
42
High
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
Multiple round number transactions
Rapid multi-hop layering pattern detected
Repetitive transaction amount
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0xc7fd355…
|
47
High
|
Short time frame between transactions
Transaction amount significantly higher than average
Anomaly detected by Isolation Forest
Transaction amount significantly higher than user average
Low transaction fee
Transaction amount doubled compared to previous transaction
Very short time between transactions
|
No tags
|
0xf85a2f9…
|
44
High
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Very short time between transactions
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x7dc4b02…
|
0
Low
|
Transaction involves trusted address (Exchange/DeFi Protocol)
|
No tags
|
0x412b745…
|
28
Medium
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
High frequency transactions (less than 1 minute interval)
Very short time between transactions
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0xb8b436a…
|
47
High
|
Short time frame between transactions
Transaction amount significantly higher than average
Related to 32 high-risk transactions (highest score: 97)
Anomaly detected by Isolation Forest
Local Outlier Factor (LOF) detected as anomaly
Transaction amount doubled compared to previous transaction
Very short time between transactions
|
No tags
|
0x41f7691…
|
0
Low
|
Transaction involves trusted address (Exchange/DeFi Protocol)
|
No tags
|
0x110be8c…
|
43
High
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
Multiple round number transactions
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Repetitive transaction amount
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0x9174df2…
|
43
High
|
Short time frame between transactions
Related to 32 high-risk transactions (highest score: 97)
Multiple round number transactions
High frequency transactions (less than 1 minute interval)
Rapid multi-hop layering pattern detected
Repetitive transaction amount
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
0x27d92bd…
|
100
High
|
Transaction involves DeFi exploit address: Bybit Exploiter 1
Sends funds to exploit address: 0x47666f...
Related to 84 high-risk transactions (highest score: 100)
Transaction amount significantly lower than average
Transaction amount halved compared to previous transaction
|
No tags
|
0x1e6ed96…
|
25
Medium
|
Short time frame between transactions
Multiple round number transactions
Repetitive transaction amount
Related to 21 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction amount significantly lower than average
|
No tags
|
Showing 1 to 10 of 0 transactions
Advanced Analysis Findings
No Local Outlier Factor analysis data is available for this report.
No wallet community detection data is available for this report.
No transaction layering pattern data is available for this report.
No address clustering data is available for this report.
No sanctioned address connection data is available for this report.
Suspicious Activities
Suspicious Activities Summary:
High Risk Activities: 23
Medium Risk Activities: 0
Total Flagged Transactions: 25
Pattern Categories:
- Network-based anomalies
- Behavioral inconsistencies
- Statistical outliers
- Temporal irregularities
Automated Detection Results:
- Algorithm coverage: Comprehensive
- Detection confidence: High
- Risk classification: Validated
Conclusions & Recommendations
Conclusions
Analysis Conclusions for 0x69d3dc90317a03ec1f1491332f86675bf3c277ff:
1. Risk Assessment
- Overall Risk Level: Very High
- Standardized Risk Score: 100/100
- Average Transaction Risk Score: 40.00
- Total Suspicious Patterns: 25
2. Key Findings
- Automated analysis completed successfully
- Multiple detection algorithms applied
- Comprehensive risk evaluation performed
- Standardized scoring methodology applied (score: 100/100)
3. Confidence Level
- Analysis Quality: High
- Data Coverage: Complete
- Algorithm Performance: Validated
4. Summary
The automated analysis has identified significant concerns.
Immediate action recommended.
Recommendations
Immediate Action Recommendations:
1. Priority Actions
- Escalate to compliance team immediately
- Implement enhanced monitoring
- Consider transaction restrictions
- Document all findings
2. Investigation Requirements
- Detailed transaction review required
- Source of funds investigation
- Enhanced due diligence protocols
- Regular monitoring updates
3. Compliance Measures
- File suspicious activity reports if required
- Implement know-your-customer procedures
- Apply enhanced monitoring protocols
- Document risk mitigation measures
Severity Assessment
Very High
Appendices & References
Appendices
Appendix A: Automated Analysis Results
Appendix B: Algorithm Details and Methodology
Appendix C: Risk Assessment Matrix
Appendix D: Transaction Pattern Analysis
Appendix E: Network Connection Analysis
Appendix F: Case Reference Documentation - CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Appendix G: Investigation Team Notes - Cladious Forensics Team
References
1. Blockchain Analysis Framework - Cladious Platform
2. Risk Assessment Guidelines - Financial Action Task Force (FATF)
3. Automated Analysis Documentation - Internal Methodology
Contact Information
Primary Analyst: Cladious Auto
Email: [email protected]
Generated: 2025-07-14 06:23:46 UTC
Investigation Team: Cladious Forensics Team
Case Reference: CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Platform: Cladious Security Analysis Platform
For questions or additional analysis requests, please contact the investigation team.
This report contains confidential information and should be handled according to your organization's data protection policies.
Report Information
Author
Cladious Auto
Published Date
July 14, 2025
Views
5
Likes
0