LIVE
UK Unveils Crypto Rulebook Ahead of 2027 RolloutReport: BitMine Expands Ethereum Treasury to 5.7M ETHUkraine Moves $8.3M in Seized Crypto Under State Management: ReportGrant Cardone Says Cardone Capital Is Adding Bitcoin at $59K, Holdings Top 2,700 BTCHyper Foundation Launches $10M Grants for USDH to USDC MigrationUkraine places $8.3M in seized crypto under state managementBitmine Adds 27,084 ETH to Ethereum Holdings in One WeekHyper Foundation launches $10M grant program for USDH-to-USDC migrationTether and Ledn Launch XAUT-Backed Crypto LoansSharpLink Bought $62.4 Million Worth of ETH Last WeekUK Unveils Crypto Rulebook Ahead of 2027 RolloutReport: BitMine Expands Ethereum Treasury to 5.7M ETHUkraine Moves $8.3M in Seized Crypto Under State Management: ReportGrant Cardone Says Cardone Capital Is Adding Bitcoin at $59K, Holdings Top 2,700 BTCHyper Foundation Launches $10M Grants for USDH to USDC MigrationUkraine places $8.3M in seized crypto under state managementBitmine Adds 27,084 ETH to Ethereum Holdings in One WeekHyper Foundation launches $10M grant program for USDH-to-USDC migrationTether and Ledn Launch XAUT-Backed Crypto LoansSharpLink Bought $62.4 Million Worth of ETH Last Week
Homepage/News/North Korea Escalates Crypto Thefts to Record Billion-Dollar Year
NEWS

North Korea Escalates Crypto Thefts to Record Billion-Dollar Year

BY Solomon M.·2 MIN READ·DECEMBER 29, 2025

In 2025, North Korean hackers, notably the Lazarus Group, have escalated cryptocurrency thefts, stealing $2 billion, primarily targeting major exchanges like Bybit and Upbit.

KEY FINDINGS - EVIDENCE LEVEL: MULTI-SOURCE
1Key sections mapped in this report
0Internal references connected to related coverage
3External source domains cited in the article
2 minEstimated time to read the full report
Key Points:
  • Lazarus Group steals $2B in crypto by 2025.
  • North Korea’s cyber theft funds nuclear activities.
  • Major incidents include Bybit, Upbit exchanges.

The increased hacks underscore growing threats to the crypto market, potentially destabilizing exchanges and raising concerns over global cybersecurity and financing of sanctioned North Korean programs.

Article

Global Cyber Threat Growth

North Korean hackers, predominantly associated with the Lazarus Group, have reached unprecedented levels of crypto theft in 2025. At least $2 billion was stolen, contributing to nuclear program funding through these cyber activities.

Key actors include the Lazarus Group, linked to Pyongyang’s Reconnaissance General Bureau. The group executed the thefts via sophisticated tactics, such as “Operation Dream Job.” This involves posing as IT recruiters to deploy malware.

Major Exchange Targets

This spike in thefts directly affects global cryptocurrency exchanges. Bybit and Upbit were among the main targets, suffering substantial losses. Bybit’s February hack alone accounted for a significant share of thefts.

Financial implications extend beyond individual exchanges, influencing the broader cryptocurrency market. Exchange-held assets, predominantly altcoins, face increased vulnerabilities. The use of cross-chain bridges and mixers for laundering adds complexity.

Broader Implications

The hacks’ consequences resonate across geopolitical and financial realms, escalating tensions and prompting enhanced security measures. Policymakers globally are assessing these developments for adjustments.

Insights from sources like Chainalysis indicate North Korea’s sophisticated laundering techniques continue to evolve. Andrew Fierman, Head of National Security Intelligence, Chainalysis, highlighted this by stating, “North Korea’s sophistication and efficacy in laundering the proceeds from these incidents is continuing to improve.” This suggests potential regulatory tightening and emphasis on strengthening exchange security worldwide, given the historical context of cyber-theft expansion.

Disclaimer:

The content on The CCPress is provided for informational purposes only and should not be considered financial or investment advice. Cryptocurrency investments carry inherent risks. Please consult a qualified financial advisor before making any investment decisions.

SOURCE TRANSPARENCY
  • External Source - Referenced domain: ic3.gov
  • External Source - Referenced domain: phemex.com
  • External Source - Referenced domain: twitter.com
  • Byline - Reported by Solomon M.
  • Coverage Desk - Primary editorial category: News
  • Media Asset - Featured image served from the WordPress media library