`0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516`

0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516 is a cryptocurrency wallet address that 2 published sources report in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Netlas and SlowMist. The earliest of those reports is dated 2025-02-27 and the most recent 2025-08-06.

wallet address APT38 MATCHED IN SOURCE

Listed as Ethereum

First seen 2025-02-27 · last seen 2025-08-06

Sources

…the exact attack vector. Modified Code Listing The attacker’s malicious contract address in this breach has been traced to: 0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516 0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516 { copied = false })" class="absolute top-2 right-3 size-7 copy-code-button"> The attack…
The $1.5B Bybit Hack & How OSINT Led to Its Attribution — Netlas · under “Injected Code Analysis” · published 2025-08-06 · pulled 2026-09-12
…enter or click to view image in full size The malicious contract address used by the attacker in this hack has been identified as: 0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516 The analysis of the “_app-52c9031bfa03da47.js” JavaScript code is as follows: Press enter or click to view image in full size…
Bybit’s $1.5 Billion Theft Unveiled: Safe{Wallet} Front-End Code Tampered — SlowMist · under “Review and Analysis” · published 2025-02-27 · pulled 2026-09-12

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: The $1.5B Bybit Hack & How OSINT Led to Its Attribution

Netlas lists 12 other indicators in this source.