North Korean Hackers Move $30M on Hyperliquid as Trump Pushes to Onshore the Platform
Blockchain data reviewed by CoinDesk shows wallets tied to North Korea's Lazarus Group sold more than $30 million in bitcoin on Hyperliquid in the last three weeks, as former President Trump pushes to bring the platform onshore to the U.S.
Key takeaways
- North Korea's Lazarus Group sold over $30 million in bitcoin on Hyperliquid in the last three weeks.
- Former President Trump is pushing to bring Hyperliquid onshore to the U.S.
- The incident highlights the ongoing challenge of combating cybercrime in decentralized finance.

Blockchain data reviewed by CoinDesk reveals that wallets linked to North Korea's notorious Lazarus Group have sold more than $30 million in bitcoin on the Hyperliquid platform over the last three weeks. This activity coincides with former President Donald Trump's efforts to bring the crypto platform onshore to the U.S., highlighting the complex interplay between geopolitical maneuvering and cybercrime in the digital asset space.
## Who Is the Lazarus Group and Why Does This Matter? The Lazarus Group is a state-sponsored hacking collective known for its involvement in high-profile cyberattacks and cryptocurrency heists. The group has been linked to numerous incidents, including the 2014 Sony Pictures hack and the 2016 Bangladesh Bank heist. Their recent activity on Hyperliquid underscores the ongoing challenge of combating cybercrime in the decentralized financial ecosystem.
## Why the Timing Matters The timing of these transactions is particularly noteworthy as it aligns with former President Trump's push to onshore Hyperliquid. Trump has been a vocal advocate for bringing crypto platforms under U.S. regulatory oversight, arguing that this would enhance security and compliance. However, the Lazarus Group's activity raises questions about the effectiveness of such measures in preventing illicit financial flows.
## What It Means for Hyperliquid and Crypto Users For Hyperliquid, this incident could have significant implications. The platform may face increased scrutiny from regulators and law enforcement agencies, which could impact its operations and user trust. For crypto users, this serves as a reminder of the importance of due diligence and the need for robust security measures when engaging with digital asset platforms.
## What to Watch Next As the situation unfolds, several key developments are worth monitoring: - Regulatory Response: How U.S. regulators respond to this incident and whether they impose additional measures on Hyperliquid. - Platform Security: Whether Hyperliquid implements enhanced security protocols to prevent similar incidents in the future. - Geopolitical Impact: The broader implications of Trump's onshoring efforts and how they might affect the global crypto landscape.
This incident is part of a larger trend of state-sponsored cybercrime groups targeting decentralized financial platforms. It highlights the need for increased collaboration between crypto platforms, law enforcement, and regulatory bodies to combat these threats effectively.
Frequently asked questions
What is the Lazarus Group?
The Lazarus Group is a state-sponsored hacking collective linked to North Korea, known for high-profile cyberattacks and cryptocurrency heists.
Why is Hyperliquid significant in this context?
Hyperliquid is a crypto platform that has recently been used by the Lazarus Group to sell bitcoin, raising concerns about security and compliance.
What is former President Trump's stance on onshoring crypto platforms?
Trump has been advocating for bringing crypto platforms like Hyperliquid onshore to the U.S. to enhance security and regulatory oversight.
How can crypto users protect themselves from such incidents?
Crypto users should conduct due diligence and implement robust security measures when engaging with digital asset platforms to mitigate risks.