Lazarus Group-Linked Wallets Move $30M via Hyperliquid, Analysts Reveal
Crypto wallet addresses linked to the North Korean state-affiliated hacking collective Lazarus Group moved $30 million in digital assets through the decentralized exchange Hyperliquid. According to blockchain data and expert analysis, the transactions involved swapping assets across several cryptocurrencies and blockchain platforms before ultimately transferring funds to major centralized exchanges, amid recent regulatory discussions in the US.
Funds Movement via Hyperliquid and HyperUnit by Lazarus
Blockchain analytics firm Arkham, with expert Emmett Gallic, identified movement of $30 million from crypto addresses linked to Lazarus Group through the decentralized exchange Hyperliquid and the platform HyperUnit. Funds were initially sent as Bitcoin (BTC), then converted into Ethereum (ETH) or Solana (SOL), followed by bridging to Tron, Solana, or Ethereum networks.
At the final stage, the assets were transferred to centralized crypto exchanges such as KuCoin, Kraken, and Lbank, as well as to several unidentified services operating on the Tron network.
Background and Scale of Lazarus Group Operations
Lazarus Group is a notorious North Korean hacker collective, considered one of the largest perpetrators of cyber theft in the crypto space. It is the primary suspect in major hacks, including the $1.4 billion heist of the Bybit exchange in 2025, the largest in the industry's history.
Additionally, North Korea-linked threat actors were responsible for at least $578 million of the $634 million stolen in crypto-related incidents reported in April.
Regulatory Context and US Political Statements
The transfers via Hyperliquid took place weeks after former US President Donald Trump mentioned that Commodity Futures Trading Commission (CFTC) Chair Michael Selig was working on regulatory pathways to bring Hyperliquid into US markets.
This statement was made during a White House event on August 16, which discussed potential frameworks for integrating innovative cryptocurrency services into the existing US legal and regulatory environment.
Why it matters
This news is significant as it highlights how state-linked cybercriminal groups continue to leverage decentralized platforms and multiple blockchain networks to move and launder large volumes of stolen digital assets efficiently. It underscores the challenges in detecting and halting such operations, emphasizing the urgent need to improve regulatory frameworks amid the evolving crypto ecosystem. The timing of these transfers alongside regulatory discussions in the US points to the critical relevance of integrating decentralized services within a proper legal framework while ensuring stringent oversight.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗