[thb_gap height=”50″]
Hackers working for the North Korean government have stolen more than two billion dollars in cryptocurrency this year, according to new research from blockchain firm Elliptic. The total marks the largest yearly haul ever recorded, with several months still left before the year ends.
A surge in digital theft
Elliptic reported that North Korean cyber teams have carried out more than thirty major hacks this year. Since 2017, the regime has taken at least six billion dollars through crypto crimes, though analysts believe the real number could be higher. Not every attack is reported, and some are difficult to confirm.
Targets expand beyond exchanges
For years, the main focus of these hackers has been large crypto trading platforms. Recently, however, they have begun targeting wealthy individuals who hold digital assets privately. These attacks often rely on psychological manipulation rather than technical flaws.
Human error replaces code flaws
The majority of this year’s thefts came through social engineering. Instead of exploiting vulnerabilities in blockchain systems, hackers tricked victims into giving up access to their accounts. Elliptic warned that people, not systems, are now the weakest link in crypto security.
Financing weapons and avoiding sanctions
The United Nations and several governments say the stolen funds are helping North Korea fund its nuclear weapons program. Japan, South Korea, and the United States have all accused the regime of using cyber theft to bypass international sanctions.
The biggest hit so far
The most significant breach of 2025 came from the one point four billion dollar theft from the crypto exchange Bybit. The FBI and other security researchers linked the operation directly to North Korean hackers. Other past victims include Axie Infinity, Harmony, and WazirX.
Why it matters
The scale of these attacks highlights how digital money can empower entire governments to operate outside the global financial system. Everyday investors risk losing savings to scams that look legitimate. Large institutions are discovering that even advanced security systems can be undone by a single compromised login or careless click.
The lesson
Cybersecurity is no longer a background issue for traders or tech firms. It touches every digital wallet, every exchange, and every person holding crypto. The threat is real, global, and evolving fast.