Key Takeaways
North Korea’s notorious Lazarus Group has reportedly laundered billions of dollars worth of stolen crypto over the past year, and much of it has flowed through Tron’s opaque DeFi infrastructure.
The group, responsible for several major crypto exchange hacks, including the $1.5 billion Bybit exploit and a $236 million theft from WazirX, is taking full advantage of decentralized protocols and unregulated OTC brokers, according to well-known blockchain investigator ZachXBT.
In a detailed on-chain analysis, ZachXBT said illicit actors are operating in what’s known as the “Black U” market — an underground network using Tron’s low-fee blockchain to move stablecoins like USDT.
OTC brokers split and shuffle funds using swap pools, new wallets, and peer-to-peer trading methods, making them difficult to trace.
ZachXBT noted that an estimated $5 billion to $10 billion in funds have passed through these channels, adding that the activity is largely unregulated and has become a “safe haven” for laundering.
While critics have pointed fingers at Tron (TRX) for enabling this laundering infrastructure, the network’s creators argue that decentralized protocols can’t control how open-source tools are used.
In response, TRON DAO has said it supports anti-crime efforts, including collaboration with Tether and TRM Labs through the T3 Financial Crime Unit (T3 FCU).
Still, many argue that these efforts are reactive and minimal, especially in the face of billion-dollar laundering operations.
ZachXBT didn’t hold back in his assessment of the broader crypto industry either.
In a recent post, he labeled the current era a “crime supercycle”, saying platforms and influencers are enabling scams with little to no consequences.
“Influencers and KOLs face zero repercussions for scamming followers,” he wrote.
“Courts are siding with smart contract exploiters due to outdated laws. If you ever wanted the opportunity to exit the industry, there has not been a better time.”
Despite the scale and frequency of hacks, very few protocols have taken meaningful steps to freeze stolen funds or proactively prevent laundering.
For hackers like Lazarus, that’s a green light.
And for the rest of the industry, ZachXBT’s warnings are yet another reminder that crypto’s biggest threat may not be regulation — it may be its own inaction.