Lazarus Group Moves $7.74M in BTC as US Lawmakers Clash Over New Crypto Regulations

Blockchain intelligence firm Arkham has issued a warning that the North Korea-linked Lazarus Group has moved 121.5 Bitcoin worth approximately $7.74 million to newly created wallet addresses, signaling the relentless activity of state-backed hackers even as US lawmakers intensify debates over stricter digital asset oversight. The transfer, flagged by Arkham's monitoring systems, underscores the group's sophisticated concealment techniques and the growing impact of North Korean cyber operations, which have stolen billions in crypto assets. This comes as Congress considers new rules to combat illicit finance, highlighting the urgent need for regulatory clarity to protect the cryptocurrency ecosystem from malicious actors.

Fresh movements tracked by Arkham

According to Arkham, the transfer occurred on July 30 and involved Bitcoin departing a wallet previously associated with Lazarus. The funds were routed to unidentified Bitcoin addresses, drawing swift attention from the blockchain community soon after the transaction was detected.

Arkham’s analysis indicates that this movement continues a broader trend, with the platform recording 625 related transactions from Lazarus-connected wallets. The organization appears to favor frequent, staggered transfers over larger, single-shot moves, employing a gradual approach to obscure the assets’ origins.

There was no evidence that the latest transfer involved depositing Bitcoin directly into an exchange. Instead, Lazarus used a new bc1q address, a practice commonly aimed at layering funds and complicating asset tracing efforts.

Concealment techniques remain sophisticated

Blockchain researchers have noted that Lazarus consistently uses new wallet addresses, mixing services, cross-chain bridges, and over-the-counter trading channels to mask the flow and ownership of its stolen digital assets.

On-chain analyst Alex Bayarchyk has observed that Lazarus rarely leaves its wallets dormant for long, interpreting this activity as part of a deliberate, long-term laundering process rather than an abrupt attempt to liquidate its holdings.

The Lazarus Group, also identified as Hidden Cobra, is regarded as one of the most severe cyber threats to the digital asset sector, with accusations that it steals digital currencies to help North Korea evade global sanctions and fund state projects.

Increasing impact of North Korean hacks

By April 2026, North Korean-affiliated attackers had stolen an estimated $577 million in digital assets. The majority of these losses stemmed from two attacks: a $285 million exploit on Drift Protocol on April 1 and a separate $292 million attack targeting the KelpDAO bridge on April 18, collectively accounting for approximately 76% of the total crypto stolen during that timeframe.

As these advanced laundering methods evolve, traders and institutional investors find it more challenging to monitor suspicious transactions effectively. Many now turn to portfolio management platforms that feature real-time data, advanced charting, and instant alerts. CryptoAppsy, which requires no account creation hassle, combines crypto investments with up-to-the-minute pricing, in-depth charting tools, and multi-currency portfolio management. With its all-in-one platform, users can set precise price alerts, filter asset-specific news, discover new coin listings promptly, and track major macroeconomic indicators such as Fed interest rates, helping them stay alert to emerging threats and opportunities in digital assets.

US lawmakers push for stricter regulation

The latest movement of Lazarus-linked funds comes as the US legislature discusses the CLARITY Act, a bill intended to fortify oversight of digital assets and tighten the controls around illicit cryptocurrency movements. The act proposes broadening anti-money laundering rules to include crypto exchanges, decentralized finance platforms, and crypto ATMs, while granting the Treasury additional powers to limit transactions involving high-risk jurisdictions.

Exchanges would also be permitted to freeze suspicious transfers for up to 180 days in cases where law enforcement is involved, potentially increasing the odds of recovering stolen funds before they are obscured by criminal actors.

While the House of Representatives has passed the CLARITY Act and the Senate Banking Committee has moved a compromise version forward, ongoing disputes regarding sanctions, privacy, and ethics policies have delayed a definitive vote in the Senate. The legislation remains under consideration while these differences are debated.