Lazarus Group recently moved over $30 million through Hyperliquid
- The Lazarus Group, a North Korean hacker group under OFAC sanctions, has moved over $30 million through Hyperliquid.
- Funds were initially received in Bitcoin and then swapped into ETH and SOL.
- The funds were bridged to Tron, Solana, and Ethereum, and deposited into exchanges like KuCoin, Lbank, and Kraken.
- One fund cluster of about $30 million can be traced back to addresses linked to the Lazarus Group.
- Another cluster, with around $5 million in trading volume, resembles Lazarus wallets identified in 2024.
PANews reported on September 1 that addresses associated with the OFAC-sanctioned North Korean hacker group Lazarus Group have recently continued to actively move more than $30 million in funds through Hyperliquid (HyperUnit).
After the funds arrived at Hyperliquid/HyperUnit via Bitcoin, they were swapped from Bitcoin into ETH and SOL, then bridged to Tron, Solana, and Ethereum, and ultimately deposited into KuCoin, Lbank, Kraken, and several unlabeled Tron-chain services.
One fund cluster, with inflows of about $30 million, can be traced back to addresses already tagged as Lazarus, while another cluster, with about $5 million in HL trading volume, has source addresses that closely resemble tagged Lazarus wallets in dormancy patterns, address types, and counterparty behavior.
ZachXBT had previously identified these addresses as belonging to Lazarus Group in 2024, linking them to $61 million in stolen funds.
拉扎鲁斯集团最近通过Hyperliquid转移超过3000万美元
PANews于9月1日报道，受到OFAC制裁的北朝鲜黑客组织拉扎鲁斯集团最近继续通过Hyperliquid（HyperUnit）活跃地转移超过3000万美元的资金。
这些资金通过比特币到达Hyperliquid/HyperUnit后，被兑换为以太坊和索拉纳，然后桥接到Tron、Solana和Ethereum，最终存入KuCoin、Lbank、Kraken以及多个未标记的Tron链服务。
一个约3000万美元的资金集群可以追溯到已经标记为拉扎鲁斯的地址，而另一个约500万美元的交易量集群则与在休眠模式、地址类型和交易对手行为上与标记的拉扎鲁斯钱包相似的源地址有关。
ZachXBT曾在2024年识别出这些地址属于拉扎鲁斯集团，并将其与6100万美元的被盗资金联系起来。