According to CoinMeta, the cryptocurrency wallets of the hacker group Lazarus, which is supported by North Korea's state, transferred $30 million in digital assets on the HyperLiquid decentralized exchange. This transfer occurred a few weeks after U.S. President Donald Trump stated that the Commodity Futures Trading Commission was working on establishing regulatory pathways for introducing HyperLiquid to the U.S. market. The wallets labeled with Lazarus sent funds via Bitcoin (BTC) to HyperLiquid and HyperUnit, and then the transactions were converted to Ethereum (ETH) or Solana (SOL), before being cross-chained to TRON, SOL or the Ethereum network. Ultimately, these funds were sent to cryptocurrency exchanges such as KuCoin, Kraken, and LBank. The Lazarus group is suspected of being behind some of the largest-scale crypto hacking attacks, including a $1.4 billion hack on the Bybit exchange in 2025.