{"id":84938,"date":"2023-09-25T10:07:32","date_gmt":"2023-09-25T07:07:32","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=84938"},"modified":"2025-09-12T20:21:36","modified_gmt":"2025-09-12T17:21:36","slug":"lazarus-group-wallets-hold-bitcoin-worth-42-5-million-analysts-say","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/lazarus-group-wallets-hold-bitcoin-worth-42-5-million-analysts-say\/","title":{"rendered":"Lazarus Group wallets hold Bitcoin worth $42.5 million, analysts say"},"content":{"rendered":"<p>North Korean hackers from the Lazarus Group hold cryptocurrencies worth at least $47 million. This was <a href=\"https:\/\/dune.com\/21co\/lazarus-group-crypto-holdings\">\u0437\u0430\u044f\u0432\u0438\u043b\u0438<\/a> by analysts at 21.co.<\/p>\n<p>According to their estimates, the cybercriminals hold $42.5 million in Bitcoin, $1.9 million in ETH, $1.1 million in BNB, and $640,000 in various stablecoins, mostly BUSD.<\/p>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/4933519a-ce4a-4518-a87b-cfd7368f1c75.webp\" alt=\"4933519a-ce4a-4518-a87b-cfd7368f1c75\" class=\"wp-image-216512\"\/><figcaption class=\"wp-element-caption\">Data: Dune Analytics.<\/figcaption><\/figure>\n<p>That said, the group does not hold anonymous coins such as Monero, Dash or Zcash.<\/p>\n<p>The Dune Analytics service tracks 295 wallets, which, according to the FBI and <span data-descr=\"Office of Foreign Assets Control of the U.S. Department of the Treasury\" class=\"old_tooltip\">OFAC<\/span>, belong to the hacker group.<\/p>\n<p>On September 6, the aggregate balance across the addresses stood at $86 million. A few days earlier, the betting platform Stake was hacked for $41 million, in which <a href=\"https:\/\/forklog.com\/en\/news\/lazarus-hackers-blamed-for-stake-breach-worth-41-million\">Lazarus were blamed<\/a>.<\/p>\n<p>The latest transaction from the hackers&#8217; wallets was recorded on September 20.<\/p>\n<p>Because 21.co&#8217;s analyses relied only on publicly available information, the real volume of assets held by the cybercriminals is likely much higher.<\/p>\n<p>Earlier, Chainalysis calculated that as of September 14, North Korea\u2013linked hackers had stolen <a href=\"https:\/\/forklog.com\/en\/news\/a-third-of-crypto-stolen-by-north-korea-linked-hackers-was-taken-in-two-attacks\">stolen $340.4 million<\/a>, with a third of the sum coming from just two attacks attributed to Lazarus.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>North Korean hackers from the Lazarus Group own cryptocurrencies worth at least $47 million.<\/p>\n","protected":false},"author":1,"featured_media":84939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1125,1202],"class_list":["post-84938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-lazarus","tag-north-korea-dprk"],"aioseo_notices":[],"amp_enabled":true,"views":"25","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/84938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=84938"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/84938\/revisions"}],"predecessor-version":[{"id":84940,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/84938\/revisions\/84940"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/84939"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=84938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=84938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=84938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}