North Korean Hackers Funnel Tens of Millions Through Crypto Platform Hyperliquid

Blockchain data reviewed by CoinDesk shows that wallets linked to North Korea's Lazarus Group have sold more than $30 million in bitcoin through the crypto trading platform Hyperliquid over the past three weeks alone. Lazarus Group is a state-sponsored hacking operation long associated with large-scale cryptocurrency theft, and the funds moving through Hyperliquid are believed to stem from previous cyber heists rather than legitimate trading activity.

The development comes as political pressure mounts to bring the Hyperliquid platform under stricter US regulatory oversight, highlighting ongoing concerns about how decentralized crypto platforms can be exploited to launder stolen funds. For businesses that accept or hold cryptocurrency, this case is a reminder that platforms with weaker compliance controls can become conduits for money linked to cybercrime, and that funds received through such channels carry elevated risk.

While this particular incident concerns a nation-state actor operating at a scale far beyond typical small business exposure, it underscores a broader lesson: cryptocurrency transactions are not immune from ties to criminal activity, and platforms vary widely in the checks they perform on incoming and outgoing funds.