The T3 Financial Crime Unit (T3FCU) has provided the latest information on a $1.5 billion North Korean hacker reportedly stole it during a Bibit exploit. The Crypto Crime Fighting team has announced that it has successfully frozen $9 million of stolen funds.
Tron, Tether and TRM Labs gathered to establish the T3 Financial Crime Unit in August 2024. The initiative focuses on identifying and disrupting illegal activities within the cryptocurrency space.
The unit has worked closely with global law enforcement and has played a key role in freezing critical assets related to a variety of financial crimes.
Overall, T3FCU has frozen around $36 million linked to fraudulent investment schemes and $65 million related to the money laundering business. The Joint Crypto Crime Surveillance Unit also addresses cases involving fearful mail and even illegal drug trafficking.
The latest investigation from T3FCU has successfully frozen $9 million related to the Bibit Hack.
T3FCU has lots of practice for North Korean hackers
The three business units have announced a $9 million recovery in X. The official Tron account teased that details of the investigation will be discussed directly at the Digital Chamber Blockchain Summit on March 26, 2025.
The announcement by T3FCU also acknowledged the efforts of blockchain analysts Zachxbt and Zeroshadow. Zhou previously thanked Zeroshadow, saying that analysts are supporting blockchain forensics.
The T3 Financial Crime Unit (T3FCU) has acquired stripes as a force to combat crypto-related crime. Tracking crypto transactions can be particularly difficult due to the anonymous nature of the obligation, and the difficulty increases several times when it involves tracking and retrieving stolen assets.
TRM shared a crypto crime report revealing that attackers stole $2.2 billion through hacking and exploiting in 2024, up 17% from the amount stolen in 2023.
The crime report also said that North Korean hackers involved in the Bibit robbery were responsible for about 35% of all funds stolen last year, winning $800 million in stolen cryptocurrency in 2024.
BYBIT continues to share updates on hack responses
Observers quickly welcomed the Bibit team’s response after the exchange received a security breach, with around $1.5 billion worth of Ethereum (ETH) lost in February 2025.
On-chain analysis linked the violation to the Lazarus Group, a hacking organization sponsored by North Korea’s infamous country. Like previous attacks, hackers quickly washed stolen funds through mixers and masking techniques, blurring the funding path and complicating recovery efforts.
BYBIT launched a bounty program and provided up to 10% of the funds recovered to individuals or entities supporting the search process. However, Zhou revealed that more than a month after the robbery, only 63 of the 5012 reports were in effect.
Discover more from Earlybirds Invest
Subscribe to get the latest posts sent to your email.