North Korean hackers stole a record $2.02 billion in cryptocurrency in 2025.

According to Chainalysis, North Korean hackers stole a record $2.02 billion in cryptocurrency in 2025, a 51% increase from 2024, accounting for 76% of the total global cryptocurrency service thefts that year. While the number of attacks decreased significantly, the profitability of individual attacks increased dramatically, with the Bybit attack in February resulting in a loss of $1.5 billion. Since records began, North Korean entities have stolen a total of $6.75 billion. In a preview of its 2026 Cryptocrime Report, Chainalysis noted that North Korean hackers have shifted their targets from decentralized finance protocols to core infrastructure such as centralized exchanges. Their money laundering patterns are characterized by high frequency and small amounts, with over 60% of funds split into transactions under $500,000. Furthermore, hackers are using social engineering techniques, such as impersonating recruiters or strategic partners, to gain system access. Experts urge the industry to adopt behavioral pattern-based monitoring tools to combat increasingly sophisticated state-sponsored cybercrime.