LIVE
Tether CEO Says USDT Adds 30M+ New Wallets Each QuarterGrant Cardone's Firm Adds 10.5 BTC, Tops 2,700 BTC HoldingsBitPay Gets Dutch MiCA License for Stablecoin PaymentsT. Rowe Price Launches Active Crypto ETF: Key DetailsSBI Group Partners With Ondo Finance for Tokenized FinanceRipple CLO Stuart Alderoty Backs CLARITY Act Before Key TestSouth Korea May Bring Crypto Under 76-Year-Old Asset Law: ReportBitcoin ETFs See $107.7M Inflows as IBIT LeadsStrategy Pauses Bitcoin Buys Until Preferred Shares RecoverBitcoin Held Inverse U.S. Dollar Correlation in Q2 2026Tether CEO Says USDT Adds 30M+ New Wallets Each QuarterGrant Cardone's Firm Adds 10.5 BTC, Tops 2,700 BTC HoldingsBitPay Gets Dutch MiCA License for Stablecoin PaymentsT. Rowe Price Launches Active Crypto ETF: Key DetailsSBI Group Partners With Ondo Finance for Tokenized FinanceRipple CLO Stuart Alderoty Backs CLARITY Act Before Key TestSouth Korea May Bring Crypto Under 76-Year-Old Asset Law: ReportBitcoin ETFs See $107.7M Inflows as IBIT LeadsStrategy Pauses Bitcoin Buys Until Preferred Shares RecoverBitcoin Held Inverse U.S. Dollar Correlation in Q2 2026
Homepage/News/North Korea Escalates Crypto Thefts to Record Billion-Dollar Year
NEWS

North Korea Escalates Crypto Thefts to Record Billion-Dollar Year

BY Solomon M.·2 MIN READ·DECEMBER 29, 2025

In 2025, North Korean hackers, notably the Lazarus Group, have escalated cryptocurrency thefts, stealing $2 billion, primarily targeting major exchanges like Bybit and Upbit.

KEY FINDINGS - EVIDENCE LEVEL: MULTI-SOURCE
1Key sections mapped in this report
0Internal references connected to related coverage
3External source domains cited in the article
2 minEstimated time to read the full report
Key Points:
  • Lazarus Group steals $2B in crypto by 2025.
  • North Korea’s cyber theft funds nuclear activities.
  • Major incidents include Bybit, Upbit exchanges.

The increased hacks underscore growing threats to the crypto market, potentially destabilizing exchanges and raising concerns over global cybersecurity and financing of sanctioned North Korean programs.

Article

Global Cyber Threat Growth

North Korean hackers, predominantly associated with the Lazarus Group, have reached unprecedented levels of crypto theft in 2025. At least $2 billion was stolen, contributing to nuclear program funding through these cyber activities.

Key actors include the Lazarus Group, linked to Pyongyang’s Reconnaissance General Bureau. The group executed the thefts via sophisticated tactics, such as “Operation Dream Job.” This involves posing as IT recruiters to deploy malware.

Major Exchange Targets

This spike in thefts directly affects global cryptocurrency exchanges. Bybit and Upbit were among the main targets, suffering substantial losses. Bybit’s February hack alone accounted for a significant share of thefts.

Financial implications extend beyond individual exchanges, influencing the broader cryptocurrency market. Exchange-held assets, predominantly altcoins, face increased vulnerabilities. The use of cross-chain bridges and mixers for laundering adds complexity.

Broader Implications

The hacks’ consequences resonate across geopolitical and financial realms, escalating tensions and prompting enhanced security measures. Policymakers globally are assessing these developments for adjustments.

Insights from sources like Chainalysis indicate North Korea’s sophisticated laundering techniques continue to evolve. Andrew Fierman, Head of National Security Intelligence, Chainalysis, highlighted this by stating, “North Korea’s sophistication and efficacy in laundering the proceeds from these incidents is continuing to improve.” This suggests potential regulatory tightening and emphasis on strengthening exchange security worldwide, given the historical context of cyber-theft expansion.

Disclaimer:

The content on The CCPress is provided for informational purposes only and should not be considered financial or investment advice. Cryptocurrency investments carry inherent risks. Please consult a qualified financial advisor before making any investment decisions.

SOURCE TRANSPARENCY
  • External Source - Referenced domain: ic3.gov
  • External Source - Referenced domain: phemex.com
  • External Source - Referenced domain: twitter.com
  • Byline - Reported by Solomon M.
  • Coverage Desk - Primary editorial category: News
  • Media Asset - Featured image served from the WordPress media library
North Korea Escalates Crypto Thefts to Record Billion-Dollar Year | TheCCPress