North Korean Hackers Steal Record-Breaking $6bn in Crypto in 2025
North Korean hackers have stolen a record-breaking amount of cryptocurrency in 2025, with three months still remaining in the year. The total stolen so far is triple last year's figure and has surpassed the 2022 record of $1.35bn. The majority of these hacks were achieved through social engineering attacks, targeting both crypto-exchanges and high-net worth individuals.
The largest theft of the year occurred in February, when North Korean hackers stole $1.46bn from cryptocurrency exchange Bybit. This is part of a larger trend, with other notable thefts including those suffered by LND.fi, WOO X, and Seedify. The total stolen to date is over $6bn, with the 2025 tally already exceeding $2bn. This stolen cryptocurrency is believed to fund North Korea's missile and nuclear weapons programs.
To hide their tracks, North Korean hackers are improving their cryptocurrency laundering techniques. These complex methods include multiple mixing rounds, cross-chain transactions, use of obscure blockchains, exploitation of refund addresses, and creation of tokens issued by laundering networks. Despite these efforts, there is no publicly available information on specific cryptocurrency mixing services developed in collaboration with North Korea for hiding transaction traces.
With the 2025 total already triple last year's figure and set to increase further, the international community must remain vigilant against North Korean cyber threats. As hackers continue to refine their techniques, it is crucial for crypto-exchanges and individuals to strengthen their security measures and be wary of social engineering attacks.
