TL;DR:
- In their first-ever cryptocurrency seizure, the Hellenic Anti-Money Laundering Authority, with help from Chainalysis, traced and froze a portion of the funds from the record-breaking $1.5 billion Bybit exchange hack.
- This landmark success was made possible by the Authority’s strategic investment in Chainalysis Reactor in 2023, procured and supported by our local partner, Performance Technologies.
- This case highlights the power of combining cutting-edge blockchain analysis tools with expert training and international cooperation to combat global crypto crime.
The blockchain’s permanent and public ledger creates a powerful advantage for law enforcement and intelligence services. Every transaction leaves a digital trail that, with the right tools and expertise, can unravel even the most sophisticated criminal schemes. Greece’s Hellenic Anti-Money Laundering Authority recently demonstrated this principle in a landmark achievement: the country’s first-ever cryptocurrency asset freezing.
This groundbreaking operation recovered funds from one of history’s largest cyber heists, a direct result of strategic investment in cutting-edge technology and expertise. The success illustrates how public authorities can leverage blockchain transparency to effectively combat financial crime in the digital age.
From global heist to local lead
The investigation traces back to February 2025, when hackers stole approximately $1.5 billion from the Bybit exchange — a crime widely attributed to North Korea’s notorious Lazarus Group. The perpetrators immediately laundered the stolen ether through an intricate web of transactions designed to obscure the money trail.
Months later, after relevant information, a suspicious crypto transaction was spotted, which became the crucial thread that allowed Greek authorities to begin unraveling the complex laundering scheme.
Following the money using Chainalysis Reactor
The Hellenic Authority’s strategic preparation proved decisive at this critical moment. In 2023, demonstrating remarkable foresight, the Authority had invested in advanced blockchain analysis capabilities by procuring Chainalysis Reactor through trusted regional partner Performance Technologies. The Analytics Business Unit at Performance Technologies provided essential operational support, delivering expert consulting, comprehensive training, and ongoing assistance to strengthen the Authority’s analytical capacity.
When the suspicious transaction surfaced, the Authority’s trained analysts were ready to act. Using Chainalysis Reactor, they visualized the complex flow of funds and established a definitive connection between the cryptocurrency in the suspect user’s wallet and the primary wallets used in the Bybit hack. The on-chain evidence was irrefutable.
This successful blockchain trace enabled the Authority to issue a “Freezing Order,” immediately freezing the wallet and its contents — effectively removing criminal proceeds from illicit actors’ control. The case has now been transferred to the competent prosecuting authority, transforming digital investigation into tangible legal consequences.
A strategic partnership for a safer crypto ecosystem
This success story is a powerful testament to the value of a multi-layered, public-private partnership. It involved:
- A forward-thinking public authority: The Hellenic Anti-Money Laundering Authority, which invested in the necessary technology and training ahead of time.
- A local technology partner: Performance Technologies, which provided the on-the-ground procurement, training, and expert support to ensure the investigators could maximize the tool’s potential.
- A global blockchain analysis leader: Chainalysis, providing the powerful Reactor platform that made the investigation possible.
The success of the operation was celebrated by Greece’s Minister of Economy and Finance, Kyriakos Pierrakakis, who emphasized the critical role of the Authority and modern digital tools in preventing and suppressing financial crime. As we see in cases like this, the veil of anonymity for criminals operating in the crypto space is rapidly shrinking.
Through continued collaboration and the deployment of advanced blockchain analysis tools, we are working hand-in-hand with law enforcement and intelligence services around the world to build trust in blockchains and create a safer digital economy for everyone.
This website contains links to third-party sites that are not under the control of Chainalysis, Inc. or its affiliates (collectively “Chainalysis”). Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein.
This material is for informational purposes only, and is not intended to provide legal, tax, financial, or investment advice. Recipients should consult their own advisors before making these types of decisions. Chainalysis has no responsibility or liability for any decision made or any other acts or omissions in connection with Recipient’s use of this material.
Chainalysis does not guarantee or warrant the accuracy, completeness, timeliness, suitability or validity of the information in this report and will not be responsible for any claim attributable to errors, omissions, or other inaccuracies of any part of such material.