North Korean hackers are moving tens of millions on Hyperliquid as Trump pushes to onshore the crypto platform

Summary

CoinDesk blockchain analysis found wallets linked to North Korea’s Lazarus Group sold over $30 million in bitcoin on the private exchange Hyperliquid within the past three weeks, and the article notes former President Trump is urging the platform to relocate to the United States.

Market Context

The security breach highlighted by the Lazarus Group activity could raise investor concerns about the robustness of crypto exchange operations, potentially pressuring the share price of publicly traded competitors such as Coinbase (COIN) as market participants reassess exchange‑related risk; the political discussion of onshoring may further influence regulatory sentiment toward U.S.-based exchanges.

Key Drivers

• CoinDesk data shows Lazarus Group wallets sold >$30 million BTC on Hyperliquid in three weeks
• North Korean hacking activity signals heightened security risk for crypto exchanges
• Trump’s public push to onshore the platform may affect regulatory outlook for U.S. exchanges

Risks

• The breach is specific to Hyperliquid, a private firm, and may not reflect broader exchange security
• No direct evidence linking the event to immediate price movement in COIN or other public equities
• Political statements may not result in concrete policy changes

Time Horizon

Short Term