North Korean Hackers: Stealing Billions in Crypto - 2025 Report
A shocking report reveals North Korean hackers are responsible for a significant portion of cryptocurrency theft worldwide. In 2025, these hackers allegedly stole $1.7 billion out of the $3.8 billion total stolen globally, marking a record year for crypto heists.
North Korea's Crypto Crime Wave
Sanctions against North Korea have fueled a surge in suspected hacking activity, with the Asian nation turning to cryptocurrency theft as a major source of revenue. Chainalysis reports North Korea-backed hackers stole $1.7bn (£1.4bn) of crypto in 2025, nearly quadrupling their previous record.
FBI Warning: North Korea's Cyber Threat
The Federal Bureau of Investigation (FBI) has issued a PSA advising the public that the Democratic People's Republic of Korea (North Korea) was responsible for the theft of approximately $1.5 billion in cryptocurrency. They further identified North Korean-linked hackers as being responsible for between $630 million and more than $1 billion in stolen crypto assets in prior years, targeting various crypto networks.
Detailed Look at North Korean Hacking Tactics
The attacks are becoming increasingly sophisticated. For instance, in the space of just a few minutes, approximately $1.46bn (£1.16bn) worth of digital currency was stolen from Bybit, one of the world’s most popular crypto exchanges. North Korean-affiliated groups stole US$1.34 billion (S$1.8 billion) in 47 incidents in 2025, up from US$660.5 million across 20 incidents in 2025.
Key Findings from the 2025 Crypto Theft Report
- Total Crypto Stolen: Hackers stole a record US$3.8 billion worth of cryptocurrency in 2025.
- North Korean Involvement: North Korean hackers stole $1.7 billion, accounting for a large portion of the total.
- FBI Investigation: The FBI is actively investigating these thefts and working to recover stolen funds.
- Sophisticated Techniques: North Korea-linked hackers set up U.S. firms to target crypto developers, utilizing fake corporate fronts. Silent Push identifies Lazarus Group as a major player.
- FBI Action: The FBI seizes Blocknovas domain, disrupting North Korean hacking infrastructure.
The Lazarus Group and North Korean Cybercrime
Several reports point to the Lazarus Group, a North Korean state-sponsored hacking group, as being heavily involved in these cyber attacks. They are known for their sophisticated techniques and ability to bypass security measures.
Stay informed about the latest developments in cryptocurrency security and learn how to protect your digital assets. The rise in hacking attacks came despite stepped-up efforts by Seoul and Washington to curb such activities. The ongoing investigation highlights the need for increased vigilance and collaboration to combat North Korea's cybercrime operations. Some of North