Screen your wallet for the exposure Bybit's compliance team flags — sanctions, mixers, stolen funds — before you deposit; Plastron returns a free Low-to-Critical risk verdict in seconds, with no signup.

In February 2025, North Korean hacking group Lazarus exploited Bybit's cold wallet infrastructure, stealing approximately $1.5 billion in ETH and stETH. The stolen funds were rapidly moved through dozens of intermediary wallets, converted through DEX protocols, and distributed widely in an effort to obscure their origin. Blockchain analytics firms tracked these movements in near-real-time, and OFAC added new addresses to the SDN list as they were identified. The consequence for ordinary users is that wallets which received ETH or stETH through DeFi protocols in the weeks following the hack may have inadvertently accepted funds that originated from the Lazarus heist — creating exposure that can trigger compliance flags at exchanges worldwide. Bybit itself also runs compliance screening on all deposits: they have strengthened their AML program substantially since the incident and now apply heightened scrutiny to wallets with complex DeFi history. Screening your wallet identifies both the Bybit hack exposure risk and any other AML red flags before you deposit.