ALT A diagram showing how North Korea hackers stole $1.5 Billion from Bybit in three steps, illustrated visually on the right, and explained in text on the right. In step one, a computer in red represents an infiltrated “Safe” employee computer with malicious code. A cold wallet, represented as a rectangle, is targeted by hackers. In the next step, Bybit starts routine transfer, with three signers, including the CEO of Bybit, where the process after the third signer is rerouted before execution as intended. In the last step, hackers hijack the transfer.

ALT A tree graph with Lazarus as the middle node, with dozens of nodes splitting off all around it, each smaller. Each circle represents a wallet held by Lazarus. Note (1) indicates that tokens are diluted across hundreds of wallets to make them harder to trace, shown close to leaf nodes. Note (2) points to one of the graph’s branches and its descendants saying that wallets swap ETH to BTC through THORchain to cover their tracks further.

ALT A map of the New Providence island in the Bahamas, and the built areas of Nassau, the capital, with some properties scattered around the island’s north and west that were owned by FTX’s Bankman-Fried and its lieutenants, annotated. The most valuable was Albany (15 large condos and one detached dwelling) worth $140M, acquired in September 2022. An inset map on the bottom right shows Nassau within the Bahamas, east of US’ Florida and north of Cuba.