North Korea-Linked Lazarus Group Moves $30 Million Through Hyperliquid

Crypto wallets tied to North Korea’s Lazarus Group, a hacking collective sanctioned by US authorities, moved $30 million in digital assets through the decentralized exchange Hyperliquid. According to blockchain data shared by an Arkham on Monday, the wallets sent funds through Hyperliquid and its bridge platform HyperUnit using Bitcoin, then converted the assets into Ether or Solana before moving them across Tron, Solana, and Ethereum networks.

Funds Eventually Reached Major Exchanges

The transferred funds were ultimately deposited into crypto exchanges including KuCoin, Kraken, and Lbank, along with several unidentified services operating on the Tron network. The activity comes just weeks after US officials signaled progress toward bringing Hyperliquid into regulated American markets. During a White House event in mid-August, President Trump said the head of the Commodity Futures Trading Commission was developing a regulatory pathway for the exchange’s US entry.

Lazarus Group’s History of Major Crypto Hacks

The Lazarus Group is widely considered responsible for some of the largest crypto thefts on record, including last year’s $1.4 billion hack of the Bybit exchange, the biggest in the industry’s history. North Korea-linked hackers have also been connected to roughly $578 million of the $634 million stolen across various crypto incidents in April alone.