New data from analytics platform Dune shows that the North Korean hacking collective Lazarus Group currently holds around $47 million in cryptocurrencies. The vast majority of their holdings are in Bitcoin at $42.5 million. They also hold $1.9 million in Ether, $1.1 million in BNB, and $640,000 in stablecoins like Binance USD.
This is down from the $86 million in crypto the group held on September 6, just after Lazarus was implicated in the hack of crypto exchange Stake.com. Dune is tracking 295 wallets identified by the FBI and OFAC as belonging to Lazarus.
Surprisingly, the hackers do not hold any privacy-focused coins like Monero or Zcash that are harder to trace. The group’s crypto wallets also continue to show activity, with transactions as recent as September 20.
However, Dune notes this is likely an underestimate of Lazarus’ total crypto holdings based on public information. The FBI has attributed several major exchange hacks this year totaling over $200 million to Lazarus as well.
Still, research from Chainalysis shows crypto thefts by North Korea-linked hackers are down 80% from 2022. The hackers have stolen $340 million in crypto so far this year, compared to a record $1.65 billion in 2022.
Last week, U.S. authorities warned Lazarus poses a significant risk for potential attacks against healthcare and public health entities.