Hyperliquid Faces Fresh Scrutiny as North Korean Hackers Move $30M in Bitcoin

Blockchain intelligence firm Arkham has discovered that North Korean-linked wallets moved approximately $30 million in Bitcoin through decentralized perpetual futures exchange Hyperliquid over a three-week period. This activity, which occurred between August and September, has raised concerns about the platform's security protocols and the broader challenge of tracking illicit funds in decentralized finance.

Hyperliquid faced similar scrutiny in December 2024 when blockchain analysts flagged wallets linked to North Korean hacking groups interacting with the platform. At the time, Hyperliquid denied any breach or loss of user funds, stating that the flagged activity did not compromise the exchange's integrity. The latest reports suggest that such wallets have continued to move significant sums through the platform, raising questions about the effectiveness of existing monitoring and compliance measures.

The movement of funds linked to North Korean hackers highlights persistent vulnerabilities in the crypto ecosystem, particularly the ability of sanctioned entities to exploit decentralized platforms. While Hyperliquid operates as a perpetual futures exchange with no central authority, this case underscores the tension between user privacy and the need for robust anti-money laundering (AML) controls.