The Lazarus Group transferred 121.5 Bitcoin—roughly $7.74 million—to two unidentified wallets, according to on-chain tracking by Arkham Intelligence and Lookonchain. The movement was detected approximately one hour after execution.
The funds originated from a known Lazarus wallet. Security researchers are monitoring the transfer for signs of money laundering or fiat conversion, though the transaction's purpose remains unclear.
The movement coincides with the worst first half on record for crypto hacks. Cybersecurity reports document a surge in illicit activity across DeFi, with compromised private keys responsible for 74 percent of all stolen funds in 2026.
Lazarus has stolen an estimated $6.75 billion in crypto over time. This year alone, the group's two largest attacks totaled $577 million.
In a separate security incident, Blockaid documented the first AI prompt injection exploit targeting crypto. An attacker manipulated an AI-powered agent into approving a $216,000 fraudulent transaction, opening a new attack surface in DeFi security.
U.S. lawmakers are advancing the CLARITY Act, aimed at closing vulnerabilities exploited by Lazarus and similar groups. The bill would give crypto exchanges and the U.S. Treasury stronger asset-freezing tools and expanded sanctions authority to block suspicious transactions before they move offshore, according to Senator Cynthia Lummis, who sponsored the legislation.
