North Korean Hackers Transfer $30 Million in Bitcoin via Hyperliquid
North Korean hackers have reportedly transferred more than $30 million in Bitcoin using the decentralized derivatives platform Hyperliquid over the past three weeks. This information comes from blockchain analytics firm Arkham and was analyzed by CoinDesk.
The transactions indicate that these hackers remain active on the platform, which previously faced scrutiny in December 2024 for its connection to wallets linked to North Korean activities. At that time, Hyperliquid asserted that there were no breaches or loss of user funds.
The ongoing movement of significant amounts of Bitcoin has prompted renewed vigilance regarding potential illicit activities associated with Hyperliquid. Market participants are likely to monitor the platform's security and regulatory standing closely, especially in light of these developments.
Market Implications
The reported activities could impact Hyperliquid's market performance, as traders may be wary of regulatory actions or responses from the platform. Observers are keenly awaiting any official statements from Hyperliquid regarding its security measures and efforts to mitigate illicit activities.
Further market reactions may depend on additional information about the extent and implications of these transactions.
Updated 02:30 UTC
New Developments on North Korean Hackers and Hyperliquid
- Wallets associated with North Korea’s Lazarus Group transferred over $30 million in Bitcoin through Hyperliquid within a three-week period.
- The funds were converted into Ether (ETH) and Solana (SOL) before being sent to centralized exchanges such as Kraken, LBank, and KuCoin.
- Emmett Gallic from blockchain intelligence firm Arkham identified the wallets involved in these transactions.
- Former President Trump mentioned Hyperliquid at a White House event, highlighting efforts to bring the exchange into the U.S. market in a compliant manner.
- Hyperliquid’s native token, HYPE, was trading at $84, reflecting a 5% increase over 24 hours, despite the ongoing sanctions risk.
- The U.S. Treasury’s OFAC sanctioned the Lazarus Group in 2019, which has been linked to significant crypto thefts, including the $1.5 billion Bybit hack in 2025.
- North Korea-linked actors reportedly stole about $1.6 billion in crypto in the first half of 2025, accounting for approximately 70% of global crypto losses during that timeframe.
- Payward, the parent company of Kraken, is negotiating a regulated U.S. pathway for Hyperliquid through its Bitnomial subsidiary, having secured three CFTC-registered licenses in May.
FAQ
What recent activity has been reported regarding North Korean hackers and Bitcoin?
North Korean hackers have reportedly transferred over $30 million in Bitcoin using the decentralized derivatives platform Hyperliquid over the past three weeks.
What platform is being used for the Bitcoin transfers?
The transfers are being conducted via the decentralized derivatives platform Hyperliquid.
What was Hyperliquid's response to previous scrutiny regarding North Korean activities?
Hyperliquid asserted that there were no breaches or loss of user funds when it faced scrutiny in December 2024 for its connection to wallets linked to North Korean activities.
How might these transactions affect Hyperliquid's market performance?
The reported activities could make traders wary of regulatory actions or responses from the platform, potentially impacting Hyperliquid's market performance.
What are market participants awaiting in light of these developments?
Market participants are keenly awaiting any official statements from Hyperliquid regarding its security measures and efforts to mitigate illicit activities.
Comments
Comments are moderated before publish.
No comments yet — be the first.