North Korea's Lazarus Group has moved 244 BTC worth about $19.42 million after months of dormancy, according to on-chain platform Arkham Intelligence. Analysts say the transfer alone can't move Bitcoin's price, but the wallets waking up from "sleep mode" is the real signal to watch.
The North Korea-controlled Lazarus Group has broken its silence. On-chain platform Arkham Intelligence tracked the hackers activating their wallets and transferring 244 BTC worth about $19.42 million.
What the wallets still hold
The transaction immediately caught analysts' attention, because this type of activity traditionally precedes a laundering chain for stolen assets. At present, the wallet still controls a consolidated portfolio worth around $40 million.
More than half of that sits in Bitcoin: the balance holds 267.526 BTC worth $20.97 million at a price of around $78,380. With the latest transfer, the hackers have moved almost their entire Bitcoin reserve. The rest of the portfolio is diversified — 9.29 million USDT, 1,737 ETH worth $4.3 million, and 5,024 BNB worth $3.5 million.
Why the size of the move matters less than the timing
The $19.42 million transaction is small next to Bitcoin's daily trading volume and can't directly crash the price on its own. However, Hupzy analysts emphasize that the key issue is not the size of the transfer, but the fact that the wallets have exited sleep mode.
As a rule, Lazarus' operational pattern runs through three stages: splitting a large amount across dozens of new addresses, mixing the coins through privacy services to conceal their origin, then cashing out the laundered cryptocurrency through over-the-counter or peer-to-peer platforms.
Too early to sound the alarm
It is too early to sound the alarm. The main obstacle to laundering these funds remains the crypto industry's advanced security infrastructure.
Modern anti-money-laundering platforms automatically flag transactions involving tracked Lazarus Group addresses. As a result, major trading platforms can quickly identify related transactions and block incoming flows, making it significantly harder for the hackers to convert the cryptocurrency directly into fiat. The movement of the 244 BTC remains under direct observation by specialized analytics firms, turning the incident into a controlled operational case for the industry rather than a reason to panic.
Source: U.Today
Trading involves risk.
Risk Disclaimer
