The Lazarus Group, The Bybit Hack and Sanctions: The New Battleground with Andrew Fierman

Mar 30, 2025

Ask episode

Chapters

Transcript

Episode notes

"The thing that's most fascinating, we talk a lot about how complex North Korea is here but when you compare it to some of the other illicit groups, particularly those that are sanctioned, say your terrorist organization that's soliciting donations on Telegram or some other social media outlet understanding what that difference in the level of complexity is, I think is really fascinating to actually know about. When we're talking about DPRK, we're talking about laundering of funds through tens of thousands. By the time we're done, it'll be hundreds of thousands of wallets. And then on the other end of it, We have a terrorist organization that was, sanctioned mid last year for facilitating on behalf of Hamas. After they got sanctioned and their addresses that they were using, got seized and disrupted. They got annoyed and they tried to bridge funds with their new Ethereum wallet after they received a few donations and they didn't even have the gas fees to facilitate it. And the transaction, when we're talking about the difference in the level of complexity here, it is really fascinating to know the nuance and it's not to say that, other nation states, like Russia or Iran don't have any level of complexity. They certainly do." - Andrew Fierman, Head of National Security Intelligence at Chainalysis Inc

Fresh out of the studio, Andrew Fierman, Head of National Security Intelligence at Chainalysis, provides an in-depth analysis of the recent $1.5 billion Bybit hack orchestrated by North Korea's Lazarus Group. Starting from his career journey from traditional banking to blockchain analytics, Andrew shares his expertise on how sanctioned entities operate in the cryptocurrency space and the sophisticated techniques employed by state-sponsored hackers. He explains how blockchain's transparency enables tracking of stolen funds. Andrew details how sanctioned states are increasingly turning to stablecoins and decentralized finance to evade traditional banking controls, while emphasizing the importance of KYC procedures and blockchain analytics in disrupting illicit activities. Last but not least, Andrew shares his perspectives on emerging threats in cryptocurrency security, including how AI-powered deepfakes and digital identity forgery are lowering barriers to sophisticated attacks.

Audio Episode Highlights: [00:46] Quote of the Day by Andrew Fierman #QOTD [02:38] Introduction of Andrew Fierman, Head of National Security Intelligence at Chainalysis [05:54] Differences between traditional financial monitoring and blockchain transparency [08:22] Explanation of the Bybit hack and how the hack occurred through a third-party vendor [12:06] Lazarus Group's operational methods and their technical advancement [15:10] Evolving tactics in the laundering process [16:18] The importance of patience in tracking and disrupting funds [19:39] Role of blockchain analytics in identifying and mitigating risks [19:47] Challenges in tracing through bridges and DeFi protocols [22:17] Comparison of North Korea's sophistication versus other sanctioned groups [24:51] How exchanges can bolster their defenses against attacks [27:52] Discussion of the Chainalysis 2025 Crypto Crime Report [31:24] Secondary sanctions and their impact on international crypto payments [35:28] Regulatory challenges around decentralized finance platforms [37:42] Dusting attacks and their implications for everyday users [40:43] Emerging threats in the crypto space [41:38] Lowering barriers to sophisticated attacks through AI and deepfakes [44:11] What success means for the crypto industry in fending off sanctioned groups [46:35] Closing

Profile: Andrew Fierman, Head of National Security Intelligence at Chainalysis Inc https://www.chainalysis.com/

LinkedIn: https://www.linkedin.com/in/andrew-fierman-87511611/

Chainalysis Crypto Crime Report: https://go.chainalysis.com/2025-Crypto-Crime-Report.html

Podcast Information: Bernard Leong hosts and produces the show. The proper credits for the intro and end music are "Energetic Sports Drive." G. Thomas Craig mixed and edited the episode in both video and audio format. Here are the links to watch or listen to our podcast.

Analyse Asia Main Site: https://analyse.asia

Analyse Asia Spotify: https://open.spotify.com/show/1kkRwzRZa4JCICr2vm0vGl

Analyse Asia Apple Podcasts: https://podcasts.apple.com/us/podcast/analyse-asia-with-bernard-leong/id914868245

Analyse Asia YouTube: https://www.youtube.com/@AnalyseAsia

Analyse Asia LinkedIn: https://www.linkedin.com/company/analyse-asia/

Analyse Asia X (formerly known as Twitter): https://twitter.com/analyseasia

Analyse Asia Threads: https://www.threads.net/@analyseasia

Subscribe Newsletter on LinkedIn https://www.linkedin.com/build-relation/newsletter-follow?entityUrn=7149559878934540288