Crypto Holdings of Lazarus Group
2023-09-15 • 21.co •
https://www.21.co/research/on-chain-insights-10-crypto-holdings-of-lazarus-group
21.co tracked 295 wallets identified by the FBI and OFAC as belonging to Lazarus Group, also described as APT38 and DPRK TraderTraitor-affiliated actors. The dashboard estimates that those wallets held about 1.60k BTC, 10.81k ETH, and 64.49k BNB, worth roughly $75 million as of September 14, 2023, while noting this is a lower-bound estimate based on public data. The report connects these holdings to major FBI-confirmed Lazarus thefts, including Ronin Bridge, Harmony Horizon Bridge, Atomic Wallet, Alphapo, CoinsPaid, and Stake.com. After the Stake.com hack, the tracked wallets showed about $39.41 million in inflows and roughly $12.96 million in net outflows, with MATIC, BNB, and BTC movement suggesting conversion and potential cash-out preparation.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| DOMAIN | stake.com | 2023-09-05 | 2025-12-31 |
| DOMAIN | dune.com | 2023-07-03 | 2025-07-01 |