North Korean hacker group Lazarus is once again in the spotlight after laundering $1.95 million in Ethereum using Tornado Cash, as reported by blockchain analyst ZachXBT.
Cyber Attack on Solana
On May 16, 2025, Lazarus carried out a cyberattack that resulted in the theft of approximately $3.2 million from several Solana addresses.
Money Laundering through Tornado Cash
The group laundered the stolen money and transferred the funds to the Ethereum blockchain. They sent 800 ETH to Tornado Cash in two batches: 400 ETH on June 25 and 400 ETH on June 27. These transactions make it difficult for investigators to trace the source of funds due to Tornado Cash's mixing capabilities.
Untouched Funds Remain
ZachXBT further mentioned that around $1.25 million in DAI and ETH remains untouched in a wallet related to the first Solana heist. This balance is likely under close surveillance by blockchain experts and governments.
The Lazarus Group continues to operate, and by using anonymization services like Tornado Cash, they complicate the efforts of investigative authorities. Their actions raise concerns regarding money laundering and cyberattacks.
