North Korean Crypto Laundering Network Exposed by Chainalysis via Garantex Platform
The investigation comes in the wake of US government sanctions targeting 10 individuals and one organization allegedly facilitating North Korean IT worker operations that finance weapons development programs.
Chainalysis, a leading blockchain intelligence firm, has documented an extensive network of intermediaries based in Russia who facilitated the conversion of millions of dollars in digital currency for North Korean information technology workers seeking to cash out their cryptocurrency holdings.
On Wednesday, the Office of Foreign Assets Control (OFAC), operating under the US Treasury Department, imposed sanctions on 10 individual persons and one corporate entity for their role in enabling North Korean government-operated IT worker operations that allegedly provide funding for the nation's weapons development initiatives, as detailed in an official press release.
Among those who faced sanctions were Russian citizens Ilya Aleksandrovich Boykov and Vitold Viktorovich Obertas. According to the Treasury Department, Boykov was responsible for converting approximately $3.5 million in cryptocurrency on behalf of the sanctioned organization Alis beginning in 2024, while Obertas processed nearly $2 million worth of cryptocurrency conversions for North Korean government representatives starting in January 2025.
In a specific case study, a cryptocurrency wallet associated with a North Korean IT worker received consistent stablecoin payments, which were subsequently converted into Ether (ETH) before being transferred through various consolidation wallet addresses to Boykov, as documented in Chainalysis' report released on Wednesday. Following receipt, Boykov proceeded to transmit the cryptocurrency to Garantex, a Russian-based exchange platform, to complete the cash-out process.
The issue of North Korean IT workers employing false identities to secure employment positions at cryptocurrency firms has represented an ongoing security challenge. In June 2025, the US Department of Justice filed criminal charges against four individuals with North Korean nationality in connection with a scheme that involved fraudulent IT employment practices and the theft of over $900,000 from cryptocurrency companies based in the US and Serbia.