Newsroom

North Korea-Linked Lazarus Group Transfers $19.4 Million in Bitcoin From Reactivated Wallets

29 August, 2026   /   News   /  AI   /   Tags:  lazarus, btc, group, addresses, linked

North Korea-Linked Lazarus Group Transfers $19.4 Million in Bitcoin From Reactivated Wallets

Blockchain trackers report 244 BTC moved from previously inactive addresses linked to the group, with analysts watching for possible laundering steps

Wallets associated with the North Korea-linked Lazarus Group have shown renewed activity, transferring roughly 244 Bitcoin valued at approximately $19.42 million, according to blockchain analytics platforms. The movement, detected on August 28, follows a period of dormancy and has drawn scrutiny from market monitors tracking potentially illicit cryptocurrency flows.

Data from Arkham Intelligence and Lookonchain indicate the transfer involved about 244.148 BTC. At the time of the reports, Bitcoin prices hovered near $78,380 to $79,500, placing the transaction value near $19.42 million. The funds shifted to other addresses, though specific destinations such as exchanges or mixing services were not publicly detailed in the initial alerts.

Portfolio Holdings After the Transfer

Following the move, the tracked Lazarus-linked portfolio retains control over assets estimated near $40 million. Bitcoin forms a major portion, with remaining holdings of approximately 267.526 BTC valued at about $20.97 million. Additional assets include roughly 9.29 million USDT, 1,737 ETH worth around $4.3 million, and 5,024 BNB valued near $3.5 million.

The latest transaction accounts for a substantial share of the Bitcoin previously held in the monitored wallets. Analysts note that such activity often precedes further dispersion of funds across new addresses as part of efforts to complicate tracing.

Lazarus Group-affiliated wallets coming out of dormancy indicates a more critical development than the sheer amount transferred.
Market surveillance commentary

Limited Immediate Market Impact

Despite the size of the transfer, analysts assess it as unlikely to exert meaningful pressure on Bitcoin prices. The amount remains modest relative to the cryptocurrency’s daily trading volume. Hupzy analysts and other trackers have stated that the reactivation of long-inactive wallets carries greater significance than the dollar value itself.

Historically, Lazarus Group operations involving stolen cryptocurrency have followed multi-stage patterns. Large holdings are frequently split among numerous new addresses before attempts to convert assets through over-the-counter or peer-to-peer channels. Enhanced anti-money laundering tools at major exchanges and analytics firms now flag and often block flows tied to known Lazarus addresses, increasing the difficulty of converting such funds into fiat currency.

The movement of 244 BTC is not expected to directly trigger a price crash; however, the wallets’ resurgence is under close surveillance.
Analyst assessment

Ongoing Monitoring and Context

This August 28 transfer follows an earlier movement earlier in the month in which Lookonchain reported a Lazarus-linked wallet sending 262.2 BTC, then valued near $16.64 million, to a newly created address. Combined, the reported August activity exceeds $36 million in Bitcoin transfers, though connections between the specific balances have not been confirmed publicly.

Blockchain intelligence firms continue to track the relocated 244 BTC closely. The group’s pattern of wallet reactivation and subsequent fund dispersion remains a focal point for compliance teams and investigators seeking to interrupt potential laundering pathways. No public confirmation has linked the latest coins directly to any single prior theft in the available reports.

Cryptocurrency platforms and analytics providers maintain heightened vigilance over addresses associated with the group, reflecting the persistent challenges posed by state-linked cyber operations in the digital asset sector.

Associated cryptocurrencies
Disclaimer
This article was generated by AI using information from multiple industry sources. It has not been reviewed or verified by a human editor and may contain inaccuracies, omissions, or misinformation. Readers are encouraged to independently verify any information before making decisions based on its content.
This article is for informational purposes only and does not constitute financial, legal, or investment advice. Cryptocurrency and related investments involve substantial risk, and past performance does not guarantee future results.