North Korean Hackers Move $30M on Hyperliquid Amid Onshoring Push
North Korean hackers have moved over $30 million in Bitcoin through the Hyperliquid derivatives platform over the past three weeks, according to blockchain data analyzed by Arkham. The funds were transferred from wallets linked to the Lazarus Group, a sanctioned state-backed hacking group.
The proceeds were then converted into Ether and Solana before being routed to centralized exchanges, including Kraken, LBank, and KuCoin. This is not the first time North Korean actors have used Hyperliquid for this purpose, with similar activity detected in 2024.
The discovery comes as the White House explores bringing Hyperliquid into the United States under regulatory oversight. President Trump has stated that Commodity Futures Trading Commission Chairman Mike Selig is working on a pathway to bring the platform into the country in a fully compliant and legal fashion.