Think cryptocurrency theft is random and scattered? Think again.
In 2025, North Korea-linked hackers have stolen more crypto than anyone else, raking in over $2 billion.
Their operations aren’t just numerous, they’re ruthlessly precise.
According to blockchain analytics firm Chainalysis, North Korean groups accounted for nearly 60% of all cryptocurrency theft this year.
This pushed their cumulative take to around $6.75 billion.
What’s striking? The number of attacks actually fell 74% compared with 2024. Fewer attacks, bigger impact.
“When North Korean hackers strike, they target large services and aim for maximum impact,” the report says.

High-Stakes Crypto Threats
Gone are the days of random wallet hacks or small-scale DeFi exploits.
Now, they’re going after centralized exchanges and custodians — think high-value, high-stakes targets.
Case in point: the $1.5 billion Bybit breach in Dubai this February, the largest crypto heist on record.
Chainalysis also highlights insider infiltration as a key driver behind these mega-heists.
It’s a strategy that maximizes returns while keeping operations lean and harder to trace.
So, what’s the takeaway? North Korea’s cybercriminals aren’t just throwing digital darts anymore — they’re surgical, calculating, and dangerous.
In the evolving world of crypto crime, size really does matter, and the biggest players are thinking bigger than ever.


