North Korean hacking syndicate Lazarus Group moved 244.148 BTC worth $19.42 million on August 28, 2026. Data from on-chain tracker Lookonchain shows the transaction was executed while Bitcoin was trading at around $79,500. This marks their second major transfer this month, following the movement of 262.2 BTC valued at $16.64 million to a new address on August 12.
The hacking group’s total Bitcoin movements in August have now surpassed $36 million. It remains unclear whether the two fund transfers originated from the same balance pool. The destination of the latest transfer also remains obscured, with no clear indication of whether the coins were sent to public exchanges, mixing protocols, or simply shuffled across other hacker-controlled wallets.
Moving Funds Amid Court Injunction
The multimillion-dollar transfers come right as legal proceedings are underway. Three weeks earlier, crypto exchange Bybit filed a lawsuit against North Korea and the Lazarus Group in a Washington, D.C. federal court on August 7, seeking to recover $1.5 billion in stolen assets.
The Bybit case stems from an exploit in February 2025, which the Federal Bureau of Investigation (FBI) linked to North Korean cyber operations codenamed ‘TraderTraitor’.
Bybit’s legal action quickly secured a court order. A federal judge issued a preliminary injunction freezing all asset transfers linked to the Bybit theft. Despite the formal freeze issued by U.S. judicial authorities, Lookonchain and other analytics firms have yet to find a direct link between this month’s $36 million Bitcoin transfers and the Bybit case.
Stolen Volumes Continue to Surge
The volume of stolen crypto amassed by North Korean hackers continues on an upward trajectory. Chainalysis estimates they looted at least $2.02 billion in cryptocurrency throughout 2025, a record 51% increase compared to the previous year.
Their illicit track record has continued aggressively this year. In April 2026, the group drained 116,500 rsETH worth $292 million through an exploit on the LayerZero bridge connected to KelpDAO.
For the crypto security sector, the frictionless movement of funds despite an injunction highlights the practical limitations of the legal system. When court orders exist only on paper, enforcement remains one step behind cryptographic code that moves capital across continents without asking for permission.
Source: crypto.news.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
