The United States Treasury Department has added three wallet addresses to sanctions allegedly linked to the hacker group responsible for the theft of more than $600 million in crypto from nonfungible token game Axie Infinity’s Ronin sidechain.

In a Friday update, the Treasury Department’s Office of Foreign Assets Control, or OFAC, Listened three Ethereum addresses to its Specially Designated Nationals restrictions for North Korea’s Lazarus Group. U.S. authorities including the Federal Bureau of Investigation and Cybersecurity and Infrastructure Security Agency have taken aim at the group for allegedly taking 173,600 Ether.ETH) and 25.5 million (USDC) from the Ronin sidechain in March — the tokens were worth more than $600 million at the time.