ZachXBT posed as a client to infiltrate a $1 billion laundering syndicate

A crypto investigator posed as a customer to get inside a Chinese organized-crime syndicate accused of laundering more than $1 billion through Lazarus Group-linked exploits. The operation involved fronting about $350,000 and messaging a Telegram user called “Jimmy Green,” giving the investigation access that wallet tracing alone would not provide.

The conversations exposed more than $12 million tied to the February 2025 Bybit exploit as it moved across Bitcoin, Ethereum, Solana, and Tron. ZachXBT said the intelligence supported on-chain attribution and helped Tether freeze $442,000 in USDT.