North Korean Hackers Steal $2 Billion in Crypto

Key Points:
  • North Korea stole $2 billion in cryptocurrency in 2025.
  • Hack accounted for 59% of 2025 crypto thefts.
  • Bybit hack resulted in $1.5 billion loss.

North Korean hackers, primarily state-sponsored groups like Lazarus, stole approximately $2.02 billion in cryptocurrency in 2025, accounting for 59% of total industry thefts, according to Chainalysis.

The theft signifies an alarming escalation in cybercrime impacting global financial stability. The sizable breach challenges cryptocurrency security and necessitates urgent advancements in protective measures.

North Korea-linked hackers targeted the cryptocurrency industry, stealing approximately $2.02 billion in 2025, as reported in North Korean Hackers Steal $2 Billion in Crypto. Primarily state-sponsored groups, such as Lazarus, were involved, impacting 59% of the total industry thefts reported by Chainalysis.

The attackers shifted strategies by embedding operatives within crypto firms, resulting in a significant breach at Bybit, amounting to $1.5 billion, as seen in the Bybit hack leads to $1.5 billion cryptocurrency loss. These tactics highlight a change in approach from previous years.

Immediate effects of these actions have been felt across major cryptocurrency exchanges and custodial platforms. North Korean hackers targeted significant holdings, prioritizing exchanges over decentralized projects, which state-sponsored groups target.

Financial implications include increasing sophistication of laundering techniques, such as cross-chain bridges used to obscure stolen assets, and a rise in large-scale hacks, despite a decrease in overall attack numbers. “Between 30% and 40% of job applications received by crypto companies are North Korean operatives,” noted Pablo Sabbatella, Cyber Investigator, SEAL.

This consolidated approach is characterized by fewer but more impactful thefts. The losses make it clear that exchanges must adapt their security measures urgently.

Potential outcomes include increased regulatory scrutiny as governments seek new strategies to counteract hacking. Historical data suggests these tactics may prompt advancements in blockchain analytics and security technologies.

Otto Bergmanr

Otte Bergmar is a crypto journalist covering Scandinavian and European blockchain markets, with a focus on decentralisation, privacy, and the AI–crypto interface. He reports on Web3 startups, market structure, and EU policy; from licensing regimes to consumer protection and cross-border compliance. At TokenTopNews, Otte transforms policy drafts, regulatory disclosures, and on-chain data into actionable, decision-ready insights, helping readers understand how regulation influences blockchain adoption across Europe.