入门

Lazarus Group Sells 911 ETH at $2,499 Average Price Amid Ongoing Blockchain Monitoring

2026-09-15 · Panews · source

入门下载费率

Quick answer

Lazarus Group — a cyber threat actor assessed by multiple blockchain intelligence firms as linked to North Korea’s Reconnaissance General Bureau — sold 911 ether (ETH) at an average price of $2,499 per coin, according to on-chain data cited by Panews on September 15, 2026. The sale totaled approximately $2.276 million in gross proceeds and occurred across multiple wallet-controlled transactions consistent with the group’s historical obfuscation tactics.

What is the significance of this ETH sale?

This transaction marks one of several documented asset liquidations by Lazarus Group in Q3 2026. Unlike earlier high-volume swaps involving privacy coins or cross-chain bridges, this sale moved ETH directly to centralized exchange deposit addresses — a shift analysts attribute to tightening regulatory scrutiny on mixers and decentralized protocols. Chainalysis and Elliptic both flagged the receiving addresses as high-risk, with prior associations to over $120 million in illicit proceeds tied to the group since 2020. Notably, none of the 911 ETH originated from the 2022 Horizon Bridge hack — a common misconception — but rather from wallets active in the 2023 Atomic Wallet breach.

How was the $2,499 average price determined?

The $2,499 figure reflects the weighted mean execution price across 17 discrete transfers made between September 12–14, 2026, as verified by Panews’ analysis of Etherscan and Arkham Intelligence data. Each transfer ranged from 22 to 89 ETH, with timestamps clustering around UTC 03:00–05:00 — a pattern previously observed in Lazarus’ operational windows. The average deviated just 0.7% below the 7-day ETH spot median ($2,517), suggesting deliberate price targeting rather than opportunistic dumping. No slippage exceeding 1.2% was recorded, indicating pre-negotiated exchange integrations or internal liquidity routing.

Why does this matter for crypto users and platforms?

This event underscores persistent systemic exposure: Lazarus Group continues to exploit gaps in KYC enforcement and exchange withdrawal whitelisting. In July 2026, the U.S. Treasury’s OFAC updated its SDN list to include two additional ETH deposit addresses tied to this same cluster — yet three of the September 12–14 transfers landed at exchanges not yet subject to those sanctions. That lag highlights real-world friction between on-chain detection speed and compliance implementation. Users should verify exchange regulatory status before depositing — especially when transacting with wallets that have interacted with sanctioned addresses or high-risk bridge contracts.

Frequently asked questions

Is Lazarus Group affiliated with any nation-state?

Yes. Multiple U.S. government reports — including the 2023 Department of Justice indictment and UN Panel of Experts reports — assess Lazarus Group as operating under the direction of North Korea’s Reconnaissance General Bureau. Its cyber operations fund weapons development programs, per OFAC advisories published through September 2026.

Can I check if my wallet has interacted with Lazarus-linked addresses?

Yes — use free tools like Etherscan’s ‘Token Transfers’ tab or Arkham’s address explorer to review inbound/outbound history. For deeper forensic context, refer to our guide on identifying high-risk wallet interactions. Always cross-reference with OFAC’s SDN list and avoid sending funds to addresses flagged in recent Chainalysis or TRM Labs alerts.

Risk warning and disclosure

Investing involves risk and market risk; official live rules always apply. This article is independent third-party information, not an official publication, and is not investment advice.

Get started: Open the official download and registration page