Lazarus Group moves 121.5 BTC worth $7.74 million to new address

Lazarus Group moves 121.5 BTC worth $7.74 million to new address

Arkham Intelligence and Lookonchain flagged a fresh Bitcoin transfer tied to the North Korea-linked Lazarus Group, as investigators track whether the funds are being repositioned for laundering or a later cash-out attempt.

BTC

Fact Check
The originating Lookonchain X post confirms verbatim that Lazarus Group moved 121.5 BTC ($7.74M), exactly matching the claim. Two independent secondary outlets (Cryptopolitan and CoinNess) corroborate the same figures and attribute them to Lookonchain, published the same day. The only nuance is that these figures rest on a single blockchain-analytics source (Lookonchain/Arkham attribution to Lazarus), but the movement and amounts are consistently reported across all sources.
    Reference123
Summary

North Korea-linked Lazarus Group moved 121.5 BTC worth about $7.74 million to two unidentified addresses, with Arkham Intelligence and Lookonchain linking the originating wallet to the group roughly an hour after the transfer. No evidence currently shows the Bitcoin reaching an exchange or mixing service, leaving investigators to monitor whether the funds are being consolidated, laundered or prepared for a later cash-out attempt. The movement comes during a costly year for crypto security. A cited report said 212 exploits in the first half of 2026 resulted in $1.1 billion in losses, with Lazarus allegedly responsible for nearly 55% of that total, or about $609 million. The group’s reported 2026 haul was driven mainly by attacks on KelpDAO and Drift Protocol, which produced losses of $292 million and $285 million, respectively. The same report said compromised private keys accounted for 74% of stolen funds this year, highlighting persistent wallet security weaknesses, while also pointing to a $216,000 AI prompt-injection exploit as an emerging threat. The transfer has also fed into a U.S. policy debate after Senator Cynthia Lummis said the CLARITY Act would address loopholes that enabled Lazarus to steal an estimated $6.75 billion in cryptocurrency over time by expanding sanctions authority and strengthening asset-freezing tools for exchanges and the Treasury.

Terms & Concepts
  • mixing service: A service that blends crypto transactions from many users to make the origin and destination of funds harder to trace.
  • private keys: Secret cryptographic credentials that control access to a crypto wallet and authorize transactions.
  • prompt-injection exploit: A manipulation technique that tricks an AI system into ignoring intended safeguards and taking harmful actions.