Archive — US — techcrunch
North Korean hackers blamed for record spike in crypto thefts in 2025
In the first half of 2025, North Korean hackers have stolen over $2 billion in crypto, marking the worst year-to-date for crypto thefts according to Chainalysis. The thefts are largely linked to a major breach at Bybit and are part of North Korea's strategy for evading sanctions and funding its nuclear program, utilizing remote IT workers to infiltrate tech companies.
Key points
- Hackers stole over $2 billion in crypto in H1 2025, surpassing total thefts in all of 2024.
- The $2.17 billion figure marks a 17% increase from the same period in 2022, previously the worst year.
- Majority of stolen crypto linked to Bybit hack, where North Korean hackers took $1.4 billion.
- Stolen funds are reportedly laundered and funneled to North Korean regime.
- North Korea's hacking activities are a central part of their sanctions evasion strategies, particularly aimed at funding their nuclear weapons program.
- Remote IT workers from North Korea infiltrate tech firms for financial gains and sensitive data theft.
Why it matters
- The spike in crypto thefts aligns with the increasing sophistication and targeting of digital assets by state-sponsored hackers, notably from North Korea.
- This incident reflects a broader trend of cybercrime evolving, especially as cryptocurrencies gain popularity and usage in global finance.
- Historically, North Korea has utilized cyberattacks as a means to generate revenue and evade international sanctions.
The record surge in crypto thefts attributed to North Korean hackers underscores escalating cyber threats, highlighting the need for stronger security measures in the cryptocurrency landscape amid ongoing geopolitical tensions.