Lazarus Group-linked addresses move $30M through Hyperliquid
Crypto wallets linked to the OFAC-sanctioned Lazarus Group moved $30 million in digital assets through Hyperliquid, weeks after regulators said they were working on a path to introduce the exchange into US markets.
Crypto wallets believed to be associated with the Lazarus Group, a state-affiliated North Korean hacker collective, transferred $30 million worth of digital assets through the decentralized exchange Hyperliquid, according to blockchain analysis. The move came shortly after US President Donald Trump announced that the Commodity Futures Trading Commission (CFTC) Chair Michael Selig was exploring a regulatory path for Hyperliquid to enter the US market.
The Lazarus-linked wallets sent funds to Hyperliquid and HyperUnit using Bitcoin (BTC), subsequently trading them into Ether (ETH) or Solana (SOL) before bridging them to Tron, Solana, or the Ethereum network. Ultimately, the funds were transferred to various crypto exchanges, including KuCoin, Kraken, and Lbank, as well as several unidentified services on the Tron network.
The Lazarus Group is widely suspected in some of the most significant cryptocurrency hacks, including the $1.4 billion heist of the Bybit exchange in 2025. North Korean-linked threat actors were responsible for at least $578 million of the $634 million stolen in crypto-related incidents in April.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
