Lazarus Group's BTC Laundering Scheme Exposed through Hyperliquid

The Lazarus Group, a US-sanctioned hacking entity linked to North Korea, has been traced to moving millions in stolen Bitcoin through the Hyperliquid and HyperUnit infrastructure.

A recent on-chain analysis spanning three weeks identified wallets associated with the group transferring BTC to these platforms, where it was swapped for Ethereum or Solana before being bridged across various blockchains.

The tracked routes included Ethereum, Solana, and Tron before the assets reached addresses on centralized trading platforms like Kraken, KuCoin, and LBank.

This complex routing highlights the difficulty of tracking fund movements used by sanctioned entities.