4.21.25 Executive Summary on Hacked Funds: Total hacked funds of USD 1.4bn around 500k ETH. 68.57% remain traceable, 27.59% have gone dark, 3.84% have been frozen. The untraceable funds primarily flowed into mixers then through bridges to P2P and OTC platforms. Recently, we have observed that the mixer mainly used by the DPRK is Wasabi. After a certain amount of BTC was washed through Wasabi, a small portion of it entered CryptoMixer, Tornado Cash and Railgun. Then, multiple cross-chain and swap services were carried out through platforms such as Thorchain, eXch, Lombard, LiFi, Stargate, and SunSwap. Eventually, it entered OTC (Over-the-Counter) or P2P (Peer-to-Peer) fiat currency exchange services. ETH Whereabout: 432,748 ETH (84.45%, ~1.21 B) has been transferred from Ethereum to BTC via Thorchain 67.25% (342,975 ETH, ~960.33 M) has been converted into 10,003 BTC across 35,772 wallets (Average 0.28 BTC each) . 1.17% (5,991 ETH, ~16.77 M) remains on the Ethereum blockchain across 12,490 wallets (Average 0.48 ETH each) . BTC Whereabout: 944 BTC (6.34%, ~90.62 M) went to Wasabi Mixer. 531 BTC (equivalent to 18,206 ETH, 3.57%) has been transferred from BTC to Ethereum via Thorchain. http://lazarusbounty.com : In the past 60 days, 5,443 bounty reports were received of which 70 were valid bounty reports. We welcome more reports, we need more bounty hunters that can decode mixers as we need a lot of help there down the road.