The North Korean-linked Lazarus Group has transferred 121.5 Bitcoin, valued at approximately $7.74 million, to newly created wallet addresses. Blockchain intelligence company Arkham identified and flagged the movement, underlining the group’s ongoing operations in shifting stolen cryptocurrency assets across the network.
Fresh movements tracked by Arkham
According to Arkham, the transfer occurred on July 30 and involved Bitcoin departing a wallet previously associated with Lazarus. The funds were routed to unidentified Bitcoin addresses, drawing swift attention from the blockchain community soon after the transaction was detected.
Arkham’s analysis indicates that this movement continues a broader trend, with the platform recording 625 related transactions from Lazarus-connected wallets. The organization appears to favor frequent, staggered transfers over larger, single-shot moves, employing a gradual approach to obscure the assets’ origins.
There was no evidence that the latest transfer involved depositing Bitcoin directly into an exchange. Instead, Lazarus used a new bc1q address, a practice commonly aimed at layering funds and complicating asset tracing efforts.
Concealment techniques remain sophisticated
Blockchain researchers have noted that Lazarus consistently uses new wallet addresses, mixing services, cross-chain bridges, and over-the-counter trading channels to mask the flow and ownership of its stolen digital assets.
On-chain analyst Alex Bayarchyk has observed that Lazarus rarely leaves its wallets dormant for long, interpreting this activity as part of a deliberate, long-term laundering process rather than an abrupt attempt to liquidate its holdings.
The Lazarus Group, also identified as Hidden Cobra, is regarded as one of the most severe cyber threats to the digital asset sector, with accusations that it steals digital currencies to help North Korea evade global sanctions and fund state projects.
Increasing impact of North Korean hacks
By April 2026, North Korean-affiliated attackers had stolen an estimated $577 million in digital assets. The majority of these losses stemmed from two attacks: a $285 million exploit on Drift Protocol on April 1 and a separate $292 million attack targeting the KelpDAO bridge on April 18, collectively accounting for approximately 76% of the total crypto stolen during that timeframe.
As these advanced laundering methods evolve, traders and institutional investors find it more challenging to monitor suspicious transactions effectively. Many now turn to portfolio management platforms that feature real-time data, advanced charting, and instant alerts. CryptoAppsy, which requires no account creation hassle, combines crypto investments with up-to-the-minute pricing, in-depth charting tools, and multi-currency portfolio management. With its all-in-one platform, users can set precise price alerts, filter asset-specific news, discover new coin listings promptly, and track major macroeconomic indicators such as Fed interest rates, helping them stay alert to emerging threats and opportunities in digital assets.
US lawmakers push for stricter regulation
The latest movement of Lazarus-linked funds comes as the US legislature discusses the CLARITY Act, a bill intended to fortify oversight of digital assets and tighten the controls around illicit cryptocurrency movements. The act proposes broadening anti-money laundering rules to include crypto exchanges, decentralized finance platforms, and crypto ATMs, while granting the Treasury additional powers to limit transactions involving high-risk jurisdictions.
Exchanges would also be permitted to freeze suspicious transfers for up to 180 days in cases where law enforcement is involved, potentially increasing the odds of recovering stolen funds before they are obscured by criminal actors.
While the House of Representatives has passed the CLARITY Act and the Senate Banking Committee has moved a compromise version forward, ongoing disputes regarding sanctions, privacy, and ethics policies have delayed a definitive vote in the Senate. The legislation remains under consideration while these differences are debated.
