/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

After North Korea's Lazarus Group moved ~41K ETH, worth ~$63.5M, from the Harmony bridge hack, Binance and Huobi freeze 124 BTC, worth ~$2.6M, linked to Lazarus

Ezra Reguerra / Cointelegraph :

Cointelegraph Ezra Reguerra

Context & Ripple Effects

The freeze follows the movement of funds tied to the Harmony breach, which had previously been linked by Elliptic to Lazarus and was later attributed by the FBI to Lazarus and APT38 in its Horizon bridge theft assessment. The case also fits a prior pattern in which the U.S. Treasury tied Lazarus to the Ronin bridge cryptocurrency theft.

Binance and Huobi are acting at the point where stolen assets reach identifiable BTC holdings, making exchange controls a practical counterweight to the laundering of bridge-hack proceeds.

First-order effects

  • Binance and Huobi have immobilized 124 BTC linked to Lazarus, restricting access to a portion of the funds moved from the Harmony-related theft.
  • Lazarus faces a more constrained route for converting or transferring the frozen BTC through those exchanges.

Second-order effects

  • Other exchanges handling assets associated with the Harmony theft face greater pressure to identify and block linked flows as the two platforms' action creates a visible enforcement precedent.
  • Bridge-hack victims and investigators gain a concrete recovery and tracing point after the movement of Harmony-linked ETH into other assets.

Third-order effects

  • Repeated attribution of bridge thefts to Lazarus, alongside exchange freezes, points to centralized trading venues becoming enforcement chokepoints even as attacks target decentralized infrastructure.
  • If exchanges continue to respond to traced illicit flows, the crypto legitimacy gap will increasingly hinge on whether cross-platform asset transfers can be monitored and interrupted quickly enough.

The trend: Cross-chain thefts are making centralized exchanges the key enforcement layer for tracing and freezing funds that originate in decentralized protocols.

Discussion

  • @cz_binance @cz_binance on x
    We detected Harmony One hacker fund movement. They previously tried to launder through Binance and we froze his accounts. This time he used Huobi. We assisted Huobi team to freeze his accounts. Together, 124 BTC have been recovered. CeFi helping to keep DeFi #SAFU! 🙏
  • @zachxbt @zachxbt on x
    1/2 North Korea's Lazarus Group had a very busy weekend moving $63.5m (~41000 ETH) from the Harmony bridge hack through Railgun before consolidating funds and depositing on three different exchanges. https://twitter.com/...
  • @justinsuntron H.E. Justin Sun on x
    We're proud to announce that thanks to our dedicated team and collaboration with @binance, we were able to detect and prevent a Harmony One hacker from attempting to launder funds through @HuobiGlobal. https://twitter.com/...
  • @kbbyhoon @kbbyhoon on x
    seems like this will become the norm. vulnerabilities will continue to exist in the innovative space. assistance from exchanges to prevent bad actors (that expoilts the vulnerabilities) from offramping feels like the best compromise. https://twitter.com/...
  • @newsasset @newsasset on x
    CeFi can lock your account at any time. Whether that is good or bad for certain situations is not the point. It is just the reality. https://twitter.com/...
  • @tayvano_ Tay on x
    this was a well known and closely watched hack with tons of folk alerted the *second* the money moved. hackers still got out of CEX's more than what was frozen. binance is on it more than most—esp more than huobi—but dont think this was a waste of a day for DPRK. it wasn't. https…
  • @zachxbt @zachxbt on x
    @AureliusValue Binance, Huobi, OKX
  • @zachxbt @zachxbt on x
    2/2 See the 350+ associated addresses here: https://www.chainabuse.com/...
  • @whalecointalk @whalecointalk on x
    CeFi helping to keep DeFi #SAFU! https://twitter.com/...