North Korea-linked cybercrime collective Lazarus Group has moved 262.2 Bitcoin (BTC), worth approximately $16.64 million, to newly created external addresses, according to on-chain data flagged by analyst ai_9684xtpa. The transfer occurred two hours before the report and aligns with previously observed money-laundering patterns.
The originating address split 262.20040151 BTC into two new addresses: roughly 182.2 BTC went to bc1qwnah...ld5g2xy5, while exactly 80 BTC was transferred to bc1qxdkk...0874k9zs. No exchange destination has been identified so far, meaning the movement is not yet proof of immediate liquidation. Instead, it resembles early-stage fund redistribution before further transfers determine where the funds will ultimately end up.
The group currently holds a combined Bitcoin and Tether (USDT) balance worth roughly $73.06 million across monitored wallets. Lazarus Group, also known as Hidden Cobra, has stolen more than $3 billion in cryptocurrency since 2017, according to United Nations reports and firms such as Chainalysis, with proceeds allegedly funneled into North Korea’s weapons programs. Recent attacks attributed to the group include the $1.5 billion Bybit hack in February 2025 and the $100 million exploit of DMM Bitcoin in May 2024.
Blockchain intelligence firms have become more adept at flagging these patterns, but the group’s methods remain adaptive. The movement also highlights the challenge for exchanges and regulators in preventing illicit funds from entering the mainstream financial system, especially as the Financial Action Task Force pushes for stricter anti-money laundering enforcement for virtual asset service providers.
From a market perspective, the transfer has limited immediate significance. Bitcoin is trading around $63,800, with short-term averages near $64,000 and the 50-day moving average around $63,400; key resistance levels remain near $66,600 and $71,900. Even if the full amount were eventually sold, it would be small relative to Bitcoin’s typical market liquidity.
