US Treasury Department Blacklists 20 Bitcoin Addresses Tied to Alleged North Korean Hackers

The U.S. Treasury Department’s Office of Foreign Asset Control has added 20 new bitcoin addresses associated with two individuals to its list of sanctioned individuals.

According to an update to OFAC’s “Specially Designated Nationals” (SDN) list, Jiadong Li and Yinyin Tian are accused of being linked to the Lazarus Group, a cybercrime group possibly affiliated with the North Korean government.

The group has been accused of stealing more than half a billion dollars in crypto as far back as 2018, when cybersecurity vendor Group-IB claimed it had targeted 14 different exchange in two years.

According to court documents unsealed Monday and flagged by George Washington University’s Seamus Hughes, the two are charged with cnospiracy to launder monetary instruments and operating an unlicensed money transmission business.

In a press release, the Treasury Department said the accusation stems the theft of $91 million stolen from one crypto exchange, on top of another $9.5 million from a different exchange.

In a statement, U.S. Treasury Secretary Steven Mnuchin said, “The North Korean regime has continued its widespread campaign of extensive cyber-attacks on financial institutions to steal funds. The United States will continue to protect the global financial system by holding accountable those who help North Korea engage in cyber-crime.”

The agency listed 12 addresses associated with Jiadong Li:

OFAC listed eight addresses affiliated with Yinyin Tian:

While thousands of bitcoin appear to have flowed through the listed addresses, the majority appeared to hold no bitcoin as of press time.

OFAC deleted a number of Russian entities linked to the Independent Petroleum Company from its sanctions list in Monday’s action.