The North Korean Lazarus Group, known for its links to numerous major cyberattacks, has been executing complex digital money laundering operations using advanced techniques to transfer illicit funds. On March 13, blockchain security firm CertiK discovered a deposit of 400 Ethereum, valued at approximately $750,000, on the Tornado Cash platform, which was traced back to the group's activity on the Bitcoin network.

The Lazarus Group has been linked to several prominent cyberattacks, including the attack on the Bybit platform in February, which resulted in the theft of $1.4 billion. By using decentralized exchange platforms like THORChain, which do not require identity verification, the group was able to move massive amounts of money, making tracking and recovery nearly impossible. Reports indicate that around $2.91 billion was transferred through THORChain in just five days.