Lykke said it halted withdrawals after a June 4 exploit affecting Lykke UK and Lykke Corp AG, later estimating losses at more than $22 million. Blockchain researcher SomaXBT publicly alleged the breach on June 9 and accused the exchange of trying to conceal it before Lykke acknowledged the attack the next day. The exchange told users funds were safe, said it had identified attacker IP addresses for a criminal investigation, and hired a cybersecurity team to block and recover stolen assets. The article does not attribute the incident to North Korea or Lazarus, but it provides baseline reporting on the Lykke breach later discussed in DPRK-linked crypto theft coverage.