ZachXBT Uncovers 7 More Addresses Linked to Lazarus Worth $61 Million—Here’s the latest

North Korea zachxbt
Last updated:
Journalist
Journalist
Hassan Shittu
About Author

Hassan, a Cryptonews.com journalist with 6+ years of experience in Web3 journalism, brings deep knowledge across Crypto, Web3 Gaming, NFTs, and Play-to-Earn sectors. His work has appeared in...

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews

In a major development in the crypto space, blockchain investigator ZachXBT identified seven wallet addresses on May 21 containing 891.13 Bitcoin, worth approximately $61 million, linked to the infamous North Korean hacking group Lazarus.ZachXBT shared these findings on X (formerly Twitter), highlighting the ongoing threat posed by the state-backed hacker group. The revelation follows the investigator’s previous research, which led to the authorities freezing $3.8 million in digital assets.

ZachXBT identifies Seven More Addresses Linked to Lazarus 

As of the latest updates, the flagged wallets still hold the amounts identified by ZachXBT. The usernames “EasyGoatfish351” and “FairJunco470” were noted explicitly for their deposits and trading volumes, which matched the stolen funds. The stolen assets were often exchanged into Tether (USDT) before being converted to fiat and withdrawn.

Lazarus Group, known for its cyber heists, resurfaced earlier this year after a period of inactivity. On January 8, they moved $1.2 million in stolen digital assets from a mixer to an inactive wallet, involving two transfers totaling 27.37 Bitcoin. Subsequently, 3.343 BTC worth $150,582 was sent to a previously used address.

The group also employed social engineering tactics, using LinkedIn to target vulnerable users with malware attacks. Blockchain security firm Slowmist flagged these attacks, noting that the hackers pretended to apply for blockchain developer jobs to gain access to confidential employee credentials.

Over $200 Million Laundered By North Korean Hacking Group Lazarus

The discovery of seven more addresses comes after an in-depth analysis published by ZachXBT on April 29, detailing how Lazarus laundered $200 million from over 25 hacks since 2020The investigation revealed that the group orchestrated over 25 exploits across various blockchains, using crypto-mixing services and peer-to-peer marketplaces to obscure the origins of the stolen funds. The Lazarus Group, infamous for its hacking activities since 2009, reportedly stole over $3 billion in crypto assets over the six years leading up to 2023, directly and indirectly impacting thousands of individuals. The laundered funds were primarily converted into USDT stablecoin before being exchanged for fiat currencies, often through over-the-counter traders in China. Notably, $44 million of the stolen cryptocurrency was laundered through Paxful and Noones P2P marketplaces using specific usernames. In response, Tether blacklisted over $374,000 worth of stolen funds linked to the group, and other stablecoin issuers blacklisted an additional $3.4 million.The United Nations Security Council (UNSC) and DeFiLlama data indicate North Korea has been involved in $2.4 billion worth of crypto heists since 2020, with a significant portion attributed to compromised private keys.Despite the increased hacking activity by North Korean groups in 2023, they stole $700 million less than in 2022. The reduction in losses might reflect improved project security and market conditions. Experts warn that hacking activity could surge again with favorable market conditions and the continued expansion of the decentralized finance (DeFi) sector, however.

More Articles

Blockchain News
South Korean Regulator Extends Bithumb Inspection, Plans Coinone Probe
Tim Alper
Tim Alper
2025-04-17 23:30:00
Blockchain News
SEC Sets Third Crypto Roundtable Date For April 25
Julia Smith
Julia Smith
2025-04-17 22:26:11
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors