Australia Joins Global Crackdown on Lazarus Group Linked to $1.9B Crypto Attacks

Foreign Minister Penny Wong today slapped magnitsky-style sanctions on three Lazarus Group hackers and two front companies, freezing any Australian-held crypto wallets tied to North Korea’s record $1.92 billion digital theft spree.

The sanctioned trio — Park Jin-hyok, Jon Chang-hyok and Kim Il — masterminded the 2022 Ronin bridge ($625M), 2023 CoinsPaid ($37M) and July’s WazirX ($235M) raids, Chainalysis confirmed. Their Tornado Cash addresses, flagged by OFAC last year, moved 4,800 BTC and 112,000 ETH in the past 18 months.

Australia’s autonomous listing is its toughest crypto-enforcement action yet. Assets under the new regime are auto-blocked at every licensed exchange, including Binance Australia and Independent Reserve. Transfers to the 27 wallet clusters now trigger instant AML alerts.

“North Korea stole enough crypto to fund 40 nuclear warheads,” Wong told Parliament. “Today we cut the pipe.”

The move syncs with yesterday’s G7 task-force update: US Treasury added 11 new mixer addresses, UK’s NCA seized £4.2M in laundered USDT, and South Korea arrested two over-the-counter brokers in Seoul.

Local impact is immediate. BTC-e AUD ramps collapsed 18% in 90 minutes; Kraken AU delisted privacy coins for sanctioned jurisdictions. ASX-listed DigitalX and Animoca Brands rose 7% on “regulatory moat” buying.

Experts forecast a 30% drop in DPRK hack volume by Q1 2026. Elliptic’s Tom Robinson: “When mixers become radioactive, state actors starve.”

Lazarus wallet tracker: 1K9p…d3f7 (4,200 BTC) | bc1q…x9k2 (68,000 ETH) Search Australia Lazarus sanctions or North Korea crypto freeze for live sanctions list.