Lazarus-Linked Wallets Move Over $30M Through Hyperliquid as U.S. Explores Regulated Entry Arkham researcher Emmett Gallic said addresses linked to the OFAC-sanctioned North Korean hacking group Lazarus Group have recently moved more than $30 million through Hyperliquid, with activity continuing through Aug. 31. The funds entered Hyperliquid as BTC, were then converted into ETH and SOL, bridged to Tron, Solana and Ethereum, and ultimately sent to KuCoin, LBank, Kraken and several unlabeled Tron-based services. The activity comes as U.S. policymakers explore a regulated path for Hyperliquid to enter the U.S. market. President Donald Trump said earlier in August that CFTC Chairman Mike Selig was working on a pathway to bring Hyperliquid into the U.S. in a compliant and legal manner. Separately, Kraken parent Payward is in advanced talks with Hyperliquid Labs on a structure that could allow U.S. users to trade a subset of Hyperliquid-linked perpetual futures through regulated exchange and clearinghouse Bitnomial, subject to regulatory approval.

North Korea’s Lazarus Group cashes out $30M+ on Hyperliquid, Trump Jr. leads a $1B Polymarket raise, and Cronos halts its chain after a $75M exploit drains Tectonic. @jennsanasie has what you need to know.

🚨ALERT: North Korea-linked Lazarus Group wallets moved $30 MILLION in crypto through Hyperliquid, per Arkham data. The funds were converted from Bitcoin into ETH or SOL, bridged across several networks and ultimately deposited into KuCoin, Kraken, LBank and unidentified Tron-based services. Lazarus is suspected of carrying out the record $1.4 BILLION exchange hack in 2025.

North Korea's Lazarus Group and other bad actors thrive on gaps in our financial rules. The Clarity Act gives Treasury new sanctions authority and a safe harbor for companies to freeze suspicious transactions before the money moves.

KNOW YOUR ENEMY: LAZARUS GROUP North Korea’s state-backed hacking syndicate has stolen over $6B in crypto since 2017, using exploits, fake job offers, malware, OTC desks, mixers and bridges to launder funds. Our research team mapped their on-chain footprint. Check it out below:

Bitget CEO: A Fake Interview Cost Me $80,000 On September 24, Bitget CEO Gracy Chen @GracyBitget shared her experience of being targeted by the Lazarus Group. The attackers first compromised the official Twitter account of a major crypto media outlet, then impersonated a journalist to contact her and communicated with her assistant and PR team via Telegram, gradually building credibility. She said the attackers ultimately carried out the attack through a Zoom “interview,” highlighting how social engineering and identity impersonation continue to pose threats to the crypto industry.