{"id":3901,"date":"2025-12-19T00:37:37","date_gmt":"2025-12-19T00:37:37","guid":{"rendered":"https:\/\/ft365.org\/index.php\/2025\/12\/19\/north-korea-steals-over-2bn-in-crypto-in-2025\/"},"modified":"2025-12-19T00:37:37","modified_gmt":"2025-12-19T00:37:37","slug":"north-korea-steals-over-2bn-in-crypto-in-2025","status":"publish","type":"post","link":"https:\/\/ft365.org\/index.php\/2025\/12\/19\/north-korea-steals-over-2bn-in-crypto-in-2025\/","title":{"rendered":"North Korea Steals Over $2bn in Crypto in 2025"},"content":{"rendered":"
\n

\"Photo<\/p>\n<\/div>\n

\n

North Korea has now amassed over $6.7bn in crypto after targeting the industry over the past decade, with the hermit nation stealing a record $2bn+ in 2025, according to Chainalysis.<\/p>\n

The blockchain analysis specialist revealed the news in the first excerpt from its forthcoming 2026 Crypto Crime Report<\/em>.<\/p>\n

It showed that North Korea remains the biggest crypto threat actor, accounting for 60% of the funds stolen from January to early December 2025. In fact, its cyber-attack on Bybit alone led to the theft of $1.5bn, in what is the world\u2019s largest cryptocurrency heist to date.<\/p>\n

Hackers from the East Asian autocracy tend to focus on large services and aim for maximum impact, the report claimed. They accounted for a record 76% of all service compromises in the period.<\/p>\n

\u201cNorth Korean threat actors are increasingly achieving these outsized results often by embedding IT workers \u2013 one of DPRK\u2019s principal attack vectors \u2013 inside crypto services to gain privileged access and enable high\u2011impact compromises,\u201d Chainalysis explained.<\/p>\n

\u201cPart of this record year likely reflects an expanded reliance on IT worker infiltration at exchanges, custodians, and web3 firms, which can accelerate initial access and lateral movement ahead of large-scale\u00a0theft.\u201d<\/p>\n

Read more on crypto heists: Crypto-Hackers Steal $2.2bn as North Koreans Dominate<\/em><\/p>\n

Their preferences for laundering these funds differ from many threat actors, the report continued. They rely heavily on Chinese language services and networks, and apparently use cross-chain bridges, mixing services and specialized services like Huione more than others.<\/p>\n

The figures for North Korea\u2019s crypto haul this year chime with market\u00a0analysis from London-based Elliptic.<\/p>\n

Personal Wallets at Greater Risk<\/h2>\n

The report also revealed a growing threat to individuals this year, as more people adopt cryptocurrency.<\/p>\n

The number of recorded thefts tripled from 2022 to reach 158,000 in 2025, with unique victims increasing from 40,000 to 80,000 in the period, Chainalysis claimed.<\/p>\n

However, the total value stolen from individual victims actually declined from a peak of $1.5bn last year to $713m in 2025. Personal wallet compromises now account for 20% of all value stolen in 2025, down from 44% in 2024.<\/p>\n

\u201cThis suggests that attackers are targeting more users, but stealing smaller amounts per victim,\u201d the report noted.<\/p>\n

Ethereum and Tron recorded the highest rates of theft, with Base and Solana much lower, despite large user numbers.<\/p>\n

\u201cThe variation in victimization rates across chains with similar technical architectures suggests that factors beyond technology \u2013 such as user demographics, popular applications, and criminal infrastructure \u2013 play important roles in determining theft rates,\u201d Chainalysis explained.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

North Korea has now amassed over $6.7bn in crypto after targeting the industry over the past decade, with the hermit nation stealing a record $2bn+ in 2025, according to Chainalysis. The blockchain analysis specialist revealed the news in the first excerpt from its forthcoming 2026 Crypto Crime Report. It showed that North Korea remains the<\/p>\n","protected":false},"author":2,"featured_media":3902,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3901","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"featured_image_urls":{"full":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"thumbnail":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99-150x150.jpg",150,150,true],"medium":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"medium_large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"1536x1536":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"2048x2048":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"morenews-featured":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"morenews-large":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"morenews-medium":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99.jpg",300,300,false],"crawlomatic_preview_image":["https:\/\/ft365.org\/wp-content\/uploads\/2025\/12\/3901-2e1cd369-3bab-4f67-a410-038a20ad6a99-146x146.jpg",146,146,true]},"author_info":{"display_name":"henry","author_link":"https:\/\/ft365.org\/index.php\/author\/henry\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","_links":{"self":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3901","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/comments?post=3901"}],"version-history":[{"count":0,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/posts\/3901\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media\/3902"}],"wp:attachment":[{"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/media?parent=3901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/categories?post=3901"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ft365.org\/index.php\/wp-json\/wp\/v2\/tags?post=3901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}