After North Korea's Lazarus Group moved ~41K ETH, worth ~$63.5M, stolen from the Harmony bridge hack, Binance and Huobi freeze 124 BTC linked to the hackers
In a recent tweet, on-chain crypto detective ZachXBT said that the hackers have been moving $64 million in the last weekend. — 75 Total views
Context & Ripple Effects
The reported freezes follow the movement of funds from Harmony, an attack that related coverage had already linked to Lazarus through similarities with the Ronin bridge attack. The subsequent FBI attribution of the Harmony theft to Lazarus and APT38 places the exchange action in a broader enforcement trail around bridge-hack proceeds.
Lazarus had also been tied by the US Treasury to the Ronin theft, while reporting showed stolen assets from that attack were still being laundered after attempted freezes. The Binance and Huobi action matters because it targets a conversion point after on-chain funds changed hands.
First-order effects
- Binance and Huobi have immobilized 124 BTC linked to Lazarus, directly limiting the group’s ability to cash out or move that identified portion through those exchanges.
- The movement of roughly 41,000 ETH from the Harmony theft leaves exchanges and investigators tracking a much larger pool of funds than the BTC that was frozen.
Second-order effects
- Other centralized exchanges face pressure to screen deposits and counterparties connected to the Harmony flows, since Binance and Huobi have demonstrated that identified proceeds can be stopped at exchange entry points.
- For Harmony, the freezes reinforce that recovery efforts depend not only on tracing stolen assets on-chain but also on cooperation from the venues where assets are converted.
Third-order effects
- Repeated bridge-hack laundering cases are making centralized exchanges a key enforcement chokepoint: the value of on-chain tracing increasingly depends on whether major trading venues act on those links.
- If exchanges continue to freeze identified illicit flows, bridge security failures will carry a longer operational burden for platforms and users, extending beyond the initial theft into asset-recovery and compliance processes.
The trend: Crypto theft enforcement is increasingly centered on pairing public blockchain tracing with centralized exchanges’ ability to halt identified laundering flows.