CoinDesk
Wallets linked to North Korea's Lazarus Group sold more than $30 million in bitcoin on Hyperliquid over the past three weeks, per blockchain data from Arkham reviewed by CoinDesk. Proceeds from those sales were rotated into ether. The flow lands directly on top of an aggressive Trump administration effort, anchored by CFTC Chairman Mike Selig, to bring the Singapore-built Hyperliquid platform inside the regulated US financial system, the very perimeter US sanctions enforcement is meant to police.
Why it matters
The Lazarus flow is not a novelty. In December 2024, MetaMask security researcher Taylor Monahan surfaced wallets suspected of belonging to North Korean operators trading on Hyperliquid since at least October of that year, a disclosure that triggered roughly $250 million in single-day net outflows. Bitwise, which launched a US ETF holding HYPE, named sanctions exposure as an explicit risk in its May filing, citing Hyperliquid's inability to compel wallet-level KYC or AML screening because users trade directly from self-custodied wallets. The newest Arkham data extends that same pattern from 2024 straight into the platform's 2025 flow.
Crypto activity tied to sanctioned states surged in 2025, with the value received by sanctioned entities jumping 694% over the year per Chainalysis. Treasury has been expanding its focus from individual sanctioned wallets to the infrastructure moving the money, which puts any venue processing tens of millions for Lazarus in a different compliance posture than it sat in a year ago.
Market impact
Hyperliquid remains the dominant decentralized venue for perpetual futures, with more than $5 trillion in cumulative volume and around $13.3 billion in open interest. That scale is precisely why it cannot stay below the regulatory floor. CME Group and Intercontinental Exchange both urged US officials earlier this year to scrutinize Hyperliquid over market-manipulation and sanctions-evasion concerns, and CME is currently suing the CFTC in a parallel fight over crypto perpetual futures access in the US. Kraken parent Payward is in advanced talks with Hyperliquid Labs to bring perpetuals to US traders per Bloomberg. The Lazarus flow gives every regulator on that email chain a fresh exhibit.
Frequently asked questions
-
How much did Lazarus Group move through Hyperliquid?
Wallets linked to Lazarus sold more than $30 million in bitcoin on Hyperliquid over the past three weeks, with proceeds rotated into ether, per Arkham data reviewed by CoinDesk.
-
Why does this matter for Hyperliquid's US onshoring push?
The Trump administration wants CFTC Chairman Mike Selig to bring Hyperliquid into the regulated US market. Sanctioned-state activity on the same venue is exactly the optics US regulators will seize on during that review.
-
Has Hyperliquid been linked to North Korean activity before?
Yes. In December 2024, MetaMask researcher Taylor Monahan surfaced wallets suspected of belonging to North Korean operators that had been trading on Hyperliquid since at least October 2024, triggering ~$250M in single-day outflows.
-
What did Bitwise say about Hyperliquid sanctions risk in its HYPE ETF filing?
Bitwise named sanctions exposure as an explicit risk in its May filing, noting that Hyperliquid cannot compel users to undergo KYC, AML, or sanctions screening because trades happen directly from self-custodied crypto wallets.
-
How big is Hyperliquid's trading volume?
Hyperliquid has processed more than $5 trillion in cumulative perpetual futures volume, holds around $13.3 billion in open interest, and handled about $205 billion in volume over the past 30 days, per DefiLlama.
CryptoSlate
TheBlock
CoinTelegraph
WatcherGuru
WuBlockchain