Analysis: North Korea's Lazarus sent $150K+ in crypto to Cambodian company Huione Pay between June 2023 and February 2024, showing how the group launders funds
Context & Ripple Effects
The reported transfers add a named Cambodian payment-company route to a broader Lazarus crypto-crime arc. Earlier coverage documented the group’s rapid theft activity and its shift toward targeting centralized services, while UN monitors later described a separate $147.5 million Tornado Cash laundering flow.
The Huione Pay connection also matters in light of the later U.S. designation of its parent, Huione Group, as a money-laundering operation. Together, the coverage traces a chain from theft to movement through identifiable intermediaries rather than treating laundering as an abstract on-chain problem.
First-order effects
- The analysis identifies Huione Pay as a recipient in Lazarus’s laundering path, giving compliance teams a concrete counterparty and transaction period to examine.
- Lazarus’s alleged transfers illustrate how stolen crypto can be routed through payment-linked businesses after a hack, complicating recovery and attribution efforts.
Second-order effects
- Exchanges, stablecoin issuers, and blockchain-monitoring firms face stronger incentives to screen exposure to Cambodian payment and OTC-style intermediaries, not only mixer addresses.
- A named off-ramp or intermediary can concentrate enforcement and de-risking pressure on connected firms, potentially pushing laundering activity toward replacement routes.
Third-order effects
- If repeated cases connect state-linked theft groups to regional financial intermediaries, crypto compliance will increasingly hinge on cross-border entity networks as well as wallet-level tracing.
- The pattern reinforces the crypto legitimacy gap: transparent ledgers can help reveal flows, but effective deterrence still depends on whether intermediaries can be identified and acted against across jurisdictions.
The trend: Crypto financial-crime enforcement is moving from tracing individual wallets toward mapping the intermediaries that turn stolen digital assets into usable funds.