Lazarus High Risk Bybit Hacking Investigation [CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001] - Wallet Analysis Report - Very High Risk - 0xbb0d...70e1
Published
15 Jul 2025
9 views
Wallet Name
Analysis Target Wallet (CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001) - 0xbb0d...70e1
Login to view LLM Analysis
Overview
Project Scope
Analysis of wallet 0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1 - Lazarus High Risk Bybit Hacking Investigation
Suspicious Wallet Hash
0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1
This is the primary wallet address being investigated in this report.
Methodology
Research Methodology
Automated Analysis Methodology for Wallet 0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1
1. Data Collection
- Automated transaction retrieval from blockchain
- Historical transaction pattern analysis
- Network connection mapping
2. Analysis Algorithms
- Multi-algorithm approach using 18 detection methods
- Statistical anomaly detection
- Behavioral pattern analysis
- Network-based risk assessment
3. Risk Scoring
- Weighted risk factor calculation
- Multi-dimensional analysis
- Historical comparison baseline
- Real-time pattern detection
4. Report Generation
- Automated findings compilation
- Risk level determination
- Recommendation synthesis
- Compliance-ready documentation
Data Collection
Data Collection Process for 0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1
1. Blockchain Data Retrieval
- Retrieved 18 analysis data points
- Collected complete transaction history
- Gathered network connection data
2. Analysis Processing
- Applied multiple detection algorithms
- Performed statistical analysis
- Generated risk indicators
- Created behavioral profiles
3. Quality Assurance
- Data validation checks
- Algorithm consistency verification
- Result accuracy confirmation
Data Preprocessing
Data Preprocessing Steps:
1. Data Cleaning
- Removed duplicate transactions
- Standardized timestamp formats
- Validated transaction data integrity
2. Feature Engineering
- Created time-based features
- Calculated statistical metrics
- Generated network features
3. Normalization
- Applied consistent scaling
- Handled missing values
- Optimized for analysis algorithms
Design Pattern
No design pattern information is available for this report.
Analysis
General Analysis Summary for 0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1
Risk Level: Very High Risk Score: 100/100 Total Issues Identified: 71 Suspicious Transactions: 18
Key Findings: - Automated analysis detected 18 suspicious transactions - Risk assessment indicates very high risk level - 71 total suspicious patterns identified across all algorithms - Standardized risk score: 100/100
Analysis Confidence: High (automated multi-algorithm approach) Recommendation: Immediate investigation required
No suspicious patterns detected.
0xb86fedb2c23ccb83747262757275311813ca7976ee004c89491533a8b3ac9270: Very short time between transactions
0x6af091106e845ceda43403c4177db1f19a5f999512679cd7ac929a235a3ffe20: Very short time between transactions
0x96c5c42db4f1ced2314e9c4daff266921e35428da0ec0b7376b41fc11fc6e50b: Very short time between transactions
0x23a0d8d20401f629867573ae78fd025c5c345b52700e709f6517afb772e92fee: Very short time between transactions
0xb7bd6fac8e269024c93f4a051bc93f7590c8256c068bcb0ee2df785c3e6ee0ad: Very short time between transactions
0x1270ed4783ce9952160e92ed6a3a91731e8ff401a647f2dfa84b4e61425af126: Very short time between transactions
0x32b1ae5e907a0c4047c285f96164a580a53ea79fe1d20b86f3e36b7df449a4dd: Very short time between transactions
0x36d6a2e1c762b7e40bf417a1e3a05e592c31db634ad29551894a54081acf90f4: Very short time between transactions
0x7be49ef76e41d4982b2153824573d6b466fe515e8a86453000bae909385587d4: Very short time between transactions
0xfb54de36247a442d13f65fd64f06676ca919d637820ca2820227e3adbd4eb464: Very short time between transactions
0x3dc6afed049cccef5c92e0069896d8936f2b2e38542acb9c04a7d1b36b08cfe1: Very short time between transactions
0xb3772e3a95e54dcb2cd4bea9f52c2b17641afab1cdf9e071a6f693b44918f44a: Very short time between transactions
0x40b9eb34fbea9611599fe6ba59826151d76fa4222ffba2311b8444083d93c5c4: Very short time between transactions
0x9b1f3cf70efd9a60e59f75eb6d04307fb0c2324e911351f302c57204ac82364a: Very short time between transactions
0xa3b9fee11cbb387bc1f334cc894b490ded4e618361eb5f90607d9f63ddd55bef: Very short time between transactions
0xe91b573027773602841846747a8cbd96aebc2e5d42d694cbbba62e3085c2209b: Very short time between transactions
0xa5d0fedf914fde2fcb85366a1fd961dcf4f9465696563d093aa875e13d04ff67: Very short time between transactions
0xb86fedb2c23ccb83747262757275311813ca7976ee004c89491533a8b3ac9270: Transaction amount significantly lower than average
0x23a0d8d20401f629867573ae78fd025c5c345b52700e709f6517afb772e92fee: Transaction amount doubled compared to previous transaction
0xa5d0fedf914fde2fcb85366a1fd961dcf4f9465696563d093aa875e13d04ff67: Transaction amount halved compared to previous transaction
0xb86fedb2c23ccb83747262757275311813ca7976ee004c89491533a8b3ac9270: High frequency transactions (less than 1 minute interval)
0x6af091106e845ceda43403c4177db1f19a5f999512679cd7ac929a235a3ffe20: High frequency transactions (less than 1 minute interval)
0x96c5c42db4f1ced2314e9c4daff266921e35428da0ec0b7376b41fc11fc6e50b: High frequency transactions (less than 1 minute interval)
0x23a0d8d20401f629867573ae78fd025c5c345b52700e709f6517afb772e92fee: High frequency transactions (less than 1 minute interval)
0xb7bd6fac8e269024c93f4a051bc93f7590c8256c068bcb0ee2df785c3e6ee0ad: High frequency transactions (less than 1 minute interval)
0x1270ed4783ce9952160e92ed6a3a91731e8ff401a647f2dfa84b4e61425af126: High frequency transactions (less than 1 minute interval)
0x32b1ae5e907a0c4047c285f96164a580a53ea79fe1d20b86f3e36b7df449a4dd: High frequency transactions (less than 1 minute interval)
0x36d6a2e1c762b7e40bf417a1e3a05e592c31db634ad29551894a54081acf90f4: High frequency transactions (less than 1 minute interval)
0x7be49ef76e41d4982b2153824573d6b466fe515e8a86453000bae909385587d4: High frequency transactions (less than 1 minute interval)
0xfb54de36247a442d13f65fd64f06676ca919d637820ca2820227e3adbd4eb464: High frequency transactions (less than 1 minute interval)
0x3dc6afed049cccef5c92e0069896d8936f2b2e38542acb9c04a7d1b36b08cfe1: High frequency transactions (less than 1 minute interval)
0xb3772e3a95e54dcb2cd4bea9f52c2b17641afab1cdf9e071a6f693b44918f44a: High frequency transactions (less than 1 minute interval)
0x40b9eb34fbea9611599fe6ba59826151d76fa4222ffba2311b8444083d93c5c4: High frequency transactions (less than 1 minute interval)
0x9b1f3cf70efd9a60e59f75eb6d04307fb0c2324e911351f302c57204ac82364a: High frequency transactions (less than 1 minute interval)
0xa3b9fee11cbb387bc1f334cc894b490ded4e618361eb5f90607d9f63ddd55bef: High frequency transactions (less than 1 minute interval)
0xe91b573027773602841846747a8cbd96aebc2e5d42d694cbbba62e3085c2209b: High frequency transactions (less than 1 minute interval)
0xa5d0fedf914fde2fcb85366a1fd961dcf4f9465696563d093aa875e13d04ff67: High frequency transactions (less than 1 minute interval)
Summary
Total Suspicious Transactions
19
Average Risk Score
91.74
Top Tags
No tags
Suspicious Transactions
| Transaction Hash | Risk Score | Risk Factors | Tags |
|---|---|---|---|
0xb86fedb…
|
43
High
|
High frequency transactions (less than 1 minute interval)
Short time frame between transactions
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
Related to 16 high-risk transactions (highest score: 100)
High volume of small transactions to the same wallet
Transaction amount halved compared to previous transaction
|
No tags
|
0x23a0d8d…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Transaction involves DeFi exploit address: Bybit Exploiter 5
Sends funds to exploit address: 0xdd9007...
Very short time between transactions
Transaction amount significantly lower than average
Related to 98 high-risk transactions (highest score: 100)
Low transaction fee
High volume of small transactions to the same wallet
Regular interval transactions between the same wallets
|
No tags
|
0x32b1ae5…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Transaction involves DeFi exploit address: Bybit Exploiter 43
Sends funds to exploit address: 0xe9bc55...
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
Related to 104 high-risk transactions (highest score: 100)
|
No tags
|
0xa3b9fee…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Sends funds to exploit address: 0xbde2cc...
Very short time between transactions
Transaction amount significantly lower than average
Related to 98 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 41
Low transaction fee
High volume of small transactions to the same wallet
Regular interval transactions between the same wallets
|
No tags
|
0xe91b573…
|
100
High
|
High frequency transactions (less than 1 minute interval)
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 38
Very short time between transactions
Transaction amount significantly lower than average
Related to 61 high-risk transactions (highest score: 100)
Low transaction fee
Anomaly detected by Isolation Forest
High volume of small transactions to the same wallet
Regular interval transactions between the same wallets
Sends funds to exploit address: 0x684d4b...
Transaction amount halved compared to previous transaction
|
No tags
|
0x6af0911…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 10
Sends funds to exploit address: 0x140c9a...
Very short time between transactions
Transaction amount significantly lower than average
Related to 119 high-risk transactions (highest score: 100)
Low transaction fee
High volume of small transactions to the same wallet
|
No tags
|
0x96c5c42…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Related to 244 high-risk transactions (highest score: 100)
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
Sends funds to exploit address: 0x47666f...
Transaction involves DeFi exploit address: Bybit Exploiter 1
|
No tags
|
0x3dfcd16…
|
53
High
|
High frequency transactions (less than 1 minute interval)
Very short time between transactions
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
Low transaction fee
Anomaly detected by Isolation Forest
High volume of small transactions to the same wallet
|
No tags
|
0xb7bd6fa…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 19
Very short time between transactions
Sends funds to exploit address: 0xb4a862...
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
Related to 72 high-risk transactions (highest score: 100)
|
No tags
|
0x1270ed4…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 45
Sends funds to exploit address: 0xf30257...
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
Related to 78 high-risk transactions (highest score: 100)
|
No tags
|
0x36d6a2e…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Related to 117 high-risk transactions (highest score: 100)
Transaction involves DeFi exploit address: Bybit Exploiter 44
Very short time between transactions
Sends funds to exploit address: 0xbca02b...
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
|
No tags
|
0x7be49ef…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Sends funds to exploit address: 0x4c198b...
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
Related to 65 high-risk transactions (highest score: 100)
High volume of small transactions to the same wallet
Regular interval transactions between the same wallets
Transaction involves DeFi exploit address: Bybit Exploiter 37
|
No tags
|
0xfb54de3…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Transaction involves DeFi exploit address: Bybit Exploiter 35
Sends funds to exploit address: 0xbc3e5e...
Very short time between transactions
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
Related to 66 high-risk transactions (highest score: 100)
|
No tags
|
0x3dc6afe…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Sends funds to exploit address: 0x1bb097...
Very short time between transactions
Transaction amount significantly lower than average
Transaction involves DeFi exploit address: Bybit Exploiter 16
Low transaction fee
Related to 46 high-risk transactions (highest score: 100)
High volume of small transactions to the same wallet
|
No tags
|
0xb3772e3…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Very short time between transactions
Transaction amount significantly lower than average
Sends funds to exploit address: 0xd3c611...
Transaction involves DeFi exploit address: Bybit Exploiter 39
Low transaction fee
High volume of small transactions to the same wallet
Regular interval transactions between the same wallets
Related to 103 high-risk transactions (highest score: 100)
|
No tags
|
0x40b9eb3…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
Transaction involves DeFi exploit address: Bybit Exploiter 40
Sends funds to exploit address: 0x9ef428...
Very short time between transactions
Related to 109 high-risk transactions (highest score: 100)
Transaction amount significantly lower than average
Low transaction fee
High volume of small transactions to the same wallet
|
No tags
|
0x9b1f3cf…
|
100
High
|
Repetitive transaction amount
Short time frame between transactions
High frequency transactions (less than 1 minute interval)
Transaction involves DeFi exploit address: Bybit Exploiter 42
Very short time between transactions
Transaction amount significantly lower than average
Sends funds to exploit address: 0xe69753...
Related to 108 high-risk transactions (highest score: 100)
Low transaction fee
High volume of small transactions to the same wallet
|
No tags
|
0xa5d0fed…
|
47
High
|
Transaction amount significantly higher than average
Transaction amount significantly higher than user average
Low transaction fee
Anomaly detected by Isolation Forest
Transaction amount doubled compared to previous transaction
High volume of small transactions to the same wallet
|
No tags
|
Showing 1 to 10 of 0 transactions
Advanced Analysis Findings
No Local Outlier Factor analysis data is available for this report.
No wallet community detection data is available for this report.
No transaction layering pattern data is available for this report.
No address clustering data is available for this report.
No sanctioned address connection data is available for this report.
Suspicious Activities
Suspicious Activities Summary:
High Risk Activities: 18
Medium Risk Activities: 0
Total Flagged Transactions: 18
Pattern Categories:
- Network-based anomalies
- Behavioral inconsistencies
- Statistical outliers
- Temporal irregularities
Automated Detection Results:
- Algorithm coverage: Comprehensive
- Detection confidence: High
- Risk classification: Validated
Conclusions & Recommendations
Conclusions
Analysis Conclusions for 0xbb0d5d38d87b03d357d160f50c6b6069aeb370e1:
1. Risk Assessment
- Overall Risk Level: Very High
- Standardized Risk Score: 100/100
- Average Transaction Risk Score: 91.28
- Total Suspicious Patterns: 18
2. Key Findings
- Automated analysis completed successfully
- Multiple detection algorithms applied
- Comprehensive risk evaluation performed
- Standardized scoring methodology applied (score: 100/100)
3. Confidence Level
- Analysis Quality: High
- Data Coverage: Complete
- Algorithm Performance: Validated
4. Summary
The automated analysis has identified significant concerns.
Immediate action recommended.
Recommendations
Immediate Action Recommendations:
1. Priority Actions
- Escalate to compliance team immediately
- Implement enhanced monitoring
- Consider transaction restrictions
- Document all findings
2. Investigation Requirements
- Detailed transaction review required
- Source of funds investigation
- Enhanced due diligence protocols
- Regular monitoring updates
3. Compliance Measures
- File suspicious activity reports if required
- Implement know-your-customer procedures
- Apply enhanced monitoring protocols
- Document risk mitigation measures
Severity Assessment
Very High
Appendices & References
Appendices
Appendix A: Automated Analysis Results
Appendix B: Algorithm Details and Methodology
Appendix C: Risk Assessment Matrix
Appendix D: Transaction Pattern Analysis
Appendix E: Network Connection Analysis
Appendix F: Case Reference Documentation - CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Appendix G: Investigation Team Notes - Cladious Forensics Team
References
1. Blockchain Analysis Framework - Cladious Platform
2. Risk Assessment Guidelines - Financial Action Task Force (FATF)
3. Automated Analysis Documentation - Internal Methodology
Contact Information
Primary Analyst: Cladious Auto
Email: [email protected]
Generated: 2025-07-15 17:13:04 UTC
Investigation Team: Cladious Forensics Team
Case Reference: CLADIOUS-[BYBIT_HACKER_LAZARUS_ITER]-2025-001
Platform: Cladious Security Analysis Platform
For questions or additional analysis requests, please contact the investigation team.
This report contains confidential information and should be handled according to your organization's data protection policies.
Report Information
Author
Cladious Auto
Published Date
July 15, 2025
Views
9
Likes
0