As increasingly sophisticated cyberattacks net the North Korean regime millions in cryptocurrency, the country’s hackers have redoubled their efforts to launder stolen digital assets. And U.S. authorities have taken notice.

Historically, the DPRK-linked hacking syndicate Lazarus Group would hold its stolen crypto for a year or more until the tokens could be successfully distributed or laundered. But the group has recently begun to move its illicit funds more rapidly through exchanges and other services, perhaps to cash out before authorities seize their wallets.

Rather than relying on external actors to launder their proceeds