Lazarus Group moves 262 BTC worth $16.6M as laundering pattern emerges

North Korea's Lazarus Group moved 262.2 BTC, worth about $16.6 million, from a flagged address on Aug. 13, splitting funds across two new wallets.

On-chain analyst ai_9684xtpa flagged the movement on social media, saying the group holds roughly $73.06 million in combined Bitcoin and Tether across monitored wallets.

The transaction shows 182.2 BTC going to bc1qwnah...ld5g2xy5 and exactly 80 BTC to bc1qxdkk...0874k9zs, with no exchange destination identified. Bitcoin traded near $63,800 at the time, with the 50-day moving average at about $63,400 and resistance at $66,600 and $71,900.

If the receiving wallets begin splitting funds further or depositing to exchanges, the movement would confirm a liquidation sequence. The group has stolen more than $3 billion in cryptocurrency since 2017, according to the United Nations and Chainalysis, with recent incidents including the $1.5 billion Bybit hack in February 2025 and the $100 million DMM Bitcoin exploit in May 2024.

The transfer pattern matches the first phase of a money-laundering sequence documented by researchers at the UK's Royal United Services Institute (RUSI). North Korea increasingly routes stolen crypto through existing criminal financial networks — OTC desks, peer-to-peer traders, mixers, and cross-chain bridges — rather than isolated infrastructure, the report found.

According to RUSI, North Korea stole at least $2.8 billion in virtual assets between January 2024 and September 2025, with proceeds supporting weapons programs. The laundering of Bybit funds after the February 2025 hack involved a network of OTC and P2P traders, many of them Chinese citizens, who moved assets around the clock before converting them to fiat, ZeroShadow found.

The current transaction's structure mirrors the early stages of this process. Blockchain intelligence firm Elliptic has documented cases where North Korean-linked funds passed through escrow services on Chinese-language Telegram channels, mixing with proceeds from "pig butchering" scams.

For Bitcoin's price, the immediate impact is minimal. A $16.6 million transfer is small against typical daily trading volume, and the price chart showed no reaction. Bitcoin remains range-bound between $63,000 and $65,000, with the short-term average near $64,000.

The more significant risk is regulatory. Exchanges and compliance teams increasingly monitor addresses linked to the group, and any attempt to deposit these funds could trigger freezes or blacklisting. The Financial Action Task Force has repeatedly called for stricter anti-money-laundering enforcement at virtual asset service providers. If the two receiving wallets begin interacting with more intermediary addresses or eventually deposit to exchanges, the sequence would become increasingly identifiable as a liquidation or laundering operation.

This article is for informational purposes only and does not constitute investment advice.