Lazarus Group sends $3.76m worth of Bitcoin to five unknown address

North Korea leapfrogs Bhutan, El Salvador in Bitcoin holdings after Bybit hack


The North Korean pirate group, Lazarus, was seen send Bitcoin to several unknown addresses, bringing their total assets to 13,441 BTC, according to chain data.

According to data of Arkham intelligence, the North Korean Bitcoin of the pirate group (BTC) The assets are now worth around $ 1.15 billion after mass transfers. On March 20 around 9:18 am UTC, the portfolio sent 12,929 BTC or equal to $ 1.12 million to an unknown portfolio address.

After the transfer of 12.929 BTC, the portfolio continued to send Bitcoin to four other portfolio addresses. Two unknown portfolios each received 0.308 BTC, one portfolio received approximately 14,849 BTC, another received 15,684 BTC. In total, the portfolio sent more than 44.07 BTC ($ 3.76 million) to five different portfolio addresses in the last three hours.

The fact that the Lazarus group distributes his BTC assets on several walletsThe group can do so for money laundering to make funds even more difficult to trace.

Earlier in the day, Go through CEO Ben Zhou claimed that 88.87% of the stolen funds of the exchange are always traceable through data on the chain. According to Zhou, approximately 86.29% of stolen funds – or equal to $ 1.23 billion – were converted into 12,836 bitcoin and spread over 9,117 wallets.

Zhou thinks that hackers used Bitcoin mixers To blur the history of transactions, which makes stolen funds even more difficult to follow.

The Lazarus group sends a value of $ 3.76 million in Bitcoin to five unknown addresses - 1
History of transactions of the Lazare group portfolio in the last three hours, mainly composed of Bitcoin transfers to unknown wallets, March 20, 2025 | Source: Arkham Intelligence

At the time of the press, the portfolio labeled “Lazarus Group” by Arkham Intelligence currently has 13,658 ETH (Ethn), valued at around 27 million dollars. The portfolio also contains $ 3.17 million in BNB (Bnb), $ 706,400 in Dai (Dai) and $ 288,870 in Babydoge (Babydog). The rest of his assets is kept in stablecoins as a bus (Busd), Usdt (USDT) and USDC (USDC). However, most of its trow is kept in Bitcoin.

The Lazare group is a hacking organization sponsored by the North Korean state, has been active since at least 2009. Their old known operation was called “Troy operation”, which targeted the South Korean government.

The last robbery of the group was a hacking on the Bybit Crypto stock market, which led the platform to lose around 1.4 billion dollars. The hack is considered one of the largest cryptographic hacks ever recorded.

Post Comment