On-chain detective ZachXBT (@zachxbt) spent $350,000 of his personal funds to pose as a client of a Chinese money laundering syndicate servicing North Korean hacking unit Lazarus Group. A report from the @NFTPlazas account on X cited the independent analyst’s investigation into the undercover operation. The move demonstrates the scale of ZachXBT’s personal commitment to dismantling crypto money laundering networks directly tied to state actors.
Chinese Intermediaries Behind Lazarus Money Laundering
Lazarus Group is widely known as a North Korean state cyber unit responsible for numerous massive crypto heists. One recorded exploit involved the theft of $387 million from the Bitget exchange, an incident previously covered on kabarbitcoin.com. To move and conceal stolen crypto assets, the hacking syndicate relies heavily on Chinese money laundering networks.
ZachXBT set his sights on this specific network of Chinese money launderers. The detective infiltrated their operations directly by posing as a client seeking asset laundering services. Deploying $350,000 of his personal funds served as cover capital to uncover how the intermediary syndicate facilitates the flow of stolen funds for the North Korean hacking group.
Track Record: From a French Case to State-Backed Syndicates
This hundred-thousand-dollar expenditure underscores ZachXBT’s consistent track record of hunting down cybercriminals. Previously, the analyst cracked the case of M1llionz, also known as RichMilly666, a French cybercriminal who laundered assets from two home invasions totaling $667,000. ZachXBT’s on-chain investigation into the French case led authorities to freeze $93,000 in illicit funds.
A stark contrast lies in the scale of the adversaries involved. While the M1llionz case centered on an individual criminal laundering the proceeds of physical crime, this latest undercover operation brought ZachXBT face-to-face with a money laundering network operating on behalf of state-level cyber actors.
What Remains Unknown
While ZachXBT’s revelation captured the attention of the crypto community, the reviewed source provided no further details regarding the results or current status of this $350,000 undercover operation. The report from @NFTPlazas did not disclose whether the undercover work has concluded or remains ongoing, nor what subsequent steps will follow the exposure of the money laundering network.
For the crypto community, committing $350,000 out of pocket as an independent investigator highlights the immense stakes on the frontlines of Web3 security. Exposing money laundering networks tied to state actors goes far beyond tracing transaction trails on a screen - it represents real personal risks shouldered by independent researchers to protect the wider ecosystem.
Reported via @NFTPlazas on X.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.




