In 2025, North Korean hackers stole over $2 billion in cryptocurrency, marking a significant increase from previous years. The largest single heist was a $1.5 billion breach of the Bybit exchange in February. These activities underscore the regime’s growing reliance on cybercrime to fund its operations.
Record-Breaking Heists
The $1.5 billion breach of Bybit in February 2025 stands as the largest crypto theft to date. This incident alone accounted for nearly 75% of North Korea’s total crypto thefts that year. The FBI has accused North Korean-backed hackers, including groups known as TraderTraitor and the Lazarus Group, of orchestrating this attack. They reportedly used malicious trading apps to distribute malware and manipulate a routine transfer from a secure “cold wallet” using a sophisticated blind-signing exploit. (apnews.com)
Shift in Targeting Strategies
While centralized exchanges remain prime targets, there’s been a noticeable shift toward individual high-net-worth crypto holders. As crypto prices have risen, these individuals have become increasingly attractive targets, often lacking the robust security measures employed by businesses. This shift has led to a rise in social engineering attacks, which are harder to detect and often go unreported. (securityweek.com)
Investor Identification, Introduction, and negotiation.
Laundering and Sanctions
The stolen funds are laundered through a vast network of banking representatives, financial institutions, and shell companies in countries including China, Russia, and North Korea. In November 2025, the U.S. imposed sanctions on eight individuals and two firms accused of laundering money through cybercrime to fund North Korea’s nuclear weapons program. (apnews.com)
Global Impact
These activities have significant global implications, affecting not only the cryptocurrency market but also international relations and security. The funds stolen are used to support North Korea’s economy and nuclear weapons program under heavy international sanctions. (pcgamer.com)
Conclusion
The year 2025 has seen North Korean hackers achieve unprecedented success in cryptocurrency thefts. Their sophisticated methods and strategic targeting have led to record-breaking heists, highlighting the need for enhanced security measures and international cooperation to combat such cyber threats.
References
-
“US sanctions North Korean bankers accused of laundering stolen cryptocurrency”. Associated Press. November 4, 2025. (apnews.com)
-
“FBI accuses North Korean-backed hackers of stealing $1.5 billion in crypto from Dubai-based firm”. Associated Press. February 24, 2025. (apnews.com)
-
“Research firm estimates that North Korean crypto hackers have already made off with over $2 billion this year, reckons the regime has stolen over $6 billion in total”. PC Gamer. October 7, 2025. (pcgamer.com)
Be the first to comment