What Happened
Blockchain analytics firm Arkham identified wallets tied to North Korea's Lazarus Group actively moving funds through Hyperliquid, a decentralized derivatives trading platform, according to data reviewed exclusively by CoinDesk. The hackers sold more than $30 million in bitcoin on the platform in the past three weeks alone, converting proceeds into ether and solana before transferring the assets to centralized exchanges including Kraken, LBank, and KuCoin.
Unlike conventional exchanges, Hyperliquid allows users to connect crypto wallets directly to the platform and trade without opening accounts or undergoing traditional know-your-customer (KYC) verification. The platform has experienced extraordinary growth, processing over $5 trillion in cumulative perpetual futures volume and currently holding approximately $13.3 billion in open interest, according to CoinDesk. The timing is particularly sensitive: the Trump administration is actively pushing to bring Hyperliquid under U.S. regulatory jurisdiction as part of a broader effort to onshore leading crypto infrastructure.
