Key Takeaways
- Digital wallets connected to North Korea’s state-backed Lazarus Group liquidated more than $30 million worth of Bitcoin through Hyperliquid during a three-week period
- The funds were exchanged for Ethereum and Solana before being transferred to Kraken, LBank, and KuCoin exchanges
- Payward, the company behind Kraken, is conducting advanced negotiations with Hyperliquid Labs to provide perpetual futures trading to American customers
- The CFTC is working with Hyperliquid to establish a compliant entry into the U.S. market, according to President Trump
- The decentralized platform has facilitated more than $5.19 trillion in total perpetual contract trading volume
Digital wallets associated with the notorious Lazarus Group from North Korea offloaded over $30 million in Bitcoin through the Hyperliquid platform across a three-week timeframe, according to new findings that emerge as Kraken’s parent entity pursues regulatory pathways to introduce the platform to American traders.
On-chain intelligence provided by Arkham and analyzed by CoinDesk revealed that wallets connected to the state-sponsored cybercriminal operation were actively routing capital through the decentralized derivatives exchange.
The Bitcoin liquidations were subsequently swapped for Ethereum and Solana tokens. These digital assets were then channeled to major centralized trading platforms, specifically Kraken, LBank, and KuCoin.
The wallets were initially identified by cryptocurrency investigator ZachXBT during 2024. Arkham Intelligence subsequently tagged these addresses as being affiliated with the Lazarus Group.
CoinDesk reported that it was unable to determine the identity of those controlling the receiving accounts or verify whether the exchanges had knowledge of the funds’ origins.
Exchange Statements
Kraken emphasized that regulatory compliance remains fundamental to its business model and confirmed it tracks blockchain transactions using specialized analytics services. The exchange stated its systems are engineered to prevent assets originating from sanctioned addresses from entering its platform.
LBank recognized the complexity of the situation, noting that illicit fund movements spanning multiple platforms, blockchain networks, and legal jurisdictions represent a sector-wide challenge that cannot be addressed by any individual entity.
KuCoin stated it could not verify the alleged activity without access to the specific wallet information. The platform noted that public blockchain records don’t necessarily reflect compliance measures implemented after digital assets arrive at an exchange.
Hyperliquid did not provide a response to inquiries.
The United States Treasury Department imposed sanctions on the Lazarus Group in 2019. The organization has been implicated in numerous cryptocurrency heists, most notably the $625 million Ronin Network breach in 2022. According to Chainalysis research, cryptocurrency transactions associated with sanctioned nations surged 694% throughout 2025.
Hyperliquid’s model permits users to execute trades directly from their cryptocurrency wallets without establishing conventional brokerage accounts or completing know-your-customer verification procedures. This framework creates challenges for regulatory bodies attempting to implement sanctions screening at the user account level.
This incident marks not the first appearance of North Korean-connected wallets on Hyperliquid. During December 2024, a security analyst from MetaMask discovered suspected North Korean wallets that had been conducting trades on the platform since at least October of that year. The revelation prompted approximately $250 million in net withdrawals within 24 hours.
Payward Negotiates U.S. Market Entry
Concurrently, Payward is conducting advanced discussions with Hyperliquid Labs regarding the provision of specific perpetual contracts to American traders via Bitnomial, its derivatives platform regulated by the Commodity Futures Trading Commission.
According to Bloomberg’s reporting, Payward has presented a preliminary framework for the proposed arrangement to the CFTC. The agreement remains contingent upon regulatory authorization. Representatives from both Payward and Hyperliquid Labs declined to provide comments.
During a White House gathering on August 19, President Trump acknowledged the initiative, stating the CFTC was actively working to facilitate Hyperliquid’s entry into the United States market through “fully compliant and legal fashion.”
Payward completed its acquisition of Bitnomial in May for a valuation reaching $550 million. The transaction provided access to a designated contract market, derivatives clearing organization, and futures commission merchant licensing. Kraken introduced regulated perpetual contracts for qualified U.S. customers in June.
Hyperliquid has facilitated over $5.19 trillion in aggregate perpetual contract volume and maintained approximately $13.3 billion in open interest at the time of this report.
The post North Korean Hackers Liquidate $30M in BTC on Hyperliquid Amid U.S. Expansion Plans appeared first on Blockonomi.
This articles is written by : Nermeen Nabil Khear Abdelmalak
All rights reserved to : USAGOLDMIES . www.usagoldmines.com
You can Enjoy surfing our website categories and read more content in many fields you may like .
Why USAGoldMines ?
USAGoldMines is a comprehensive website offering the latest in financial, crypto, and technical news. With specialized sections for each category, it provides readers with up-to-date market insights, investment trends, and technological advancements, making it a valuable resource for investors and enthusiasts in the fast-paced financial world.