Germany seizes $38M in crypto from Bybit hack-linked eXch exchange
2025-05-09 18:05:21

German law enforcement seized 34 million euros ($38 million) in cryptocurrency from eXch, a cryptocurrency platform allegedly used to launder funds stolen after Bybit’s record-breaking $1.4 billion hack.

The seizure, announced on May 9 by Germany’s Federal Criminal Police Office (BKA) and Frankfurt’s main prosecutor’s office, involved multiple crypto assets, including Bitcoin,Ether, Litecoinand Dash. The move marks the third-largest crypto confiscation in the BKA’s history.

The authorities also seized eXch’s German server infrastructure with over eight terabytes of data and shut down the platform, the announcement added.

eXch exchanged crypto without AML

In the statement, the BKA described eXch as a “swapping” service that allowed users to exchange various crypto assets without implementing Anti-Money Laundering (AML) measures.

The platform had operated since 2014 and reportedly facilitated about $1.9 billion in crypto transfers, some of which were believed to be of “criminal origin,” including assets laundered during the Bybit hack.

“Among other things, a portion of the $1.5 billion stolen from the Bybit crypto exchange, which was hacked on Feb. 21, 2025, is said to have been exchanged via eXch,” the authorities wrote.

Multisig, FixedFloat among laundering cases

According to a post by crypto sleuth ZachXBT, eXch was also involved in laundering millions of funds from other crypto thefts and exploits, including Multisig, FixedFloat and the $243 million Genesis creditor theft.

Those were in addition to “countless phishing drainer services over the past few years with refusal to block addresses and freeze orders,” ZachXBT said.

ZachXBT was among the first security analysts to report on eXch’s links to laundering $35 million of crypto assets stolen from Bybit soon after the hack was confirmed.

“Lazarus Group transferred 5K ETH from the Bybit Hack to a new address and began laundering funds via eXch (a centralized mixer) and bridging funds to Bitcoin via Chainflip,” ZachXBT wrote in a Telegram post on Feb. 22.