North Korea-linked hackers stole over $2 billion in crypto this year alone, using fewer attacks with far larger losses. North Korea’s exploits reached a new highNorth Korea-linked hackers stole over $2 billion in crypto this year alone, using fewer attacks with far larger losses. North Korea’s exploits reached a new high

$3.4 Billion Stolen: North Korea Drives Record $2 Billion Crypto Theft Year This year

North Korea-linked hackers stole over $2 billion in crypto this year alone, using fewer attacks with far larger losses.

North Korea’s exploits reached a new high this year. Data from Chainalysis shows a rise in stolen value, even as the number of attacks fell. 

While over $3.4 billion was stolen this year, North Korean hackers were responsible for around $2 billion.

This trend indicates how threat actors are now focusing on fewer but far larger targets. 

North Korea Crypto Theft Pushes Total Losses Higher

According to Chainalysis, hackers from North Korea stole about $2.02 billion.

That figure stands as a 51% increase from the prior year, and the new total pushed all-time losses tied to the country to roughly $6.75 billion.

Attack frequency dropped, yet the stolen value surged. This change came from a handful of very large hacks, with the February attack on Bybit alone accounting for $1.5 billion.

Billions stolen in a yearBillions stolen in a year | source: Chainalysis

Service providers also faced the biggest losses as centralised platforms saw rare but massive private key compromises that erased large sums in minutes.

According to Chainalysis, over $3.4 billion in crypto vanished across the industry by early December and North Korea-linked actors caused most of the damage.

Fewer Attacks Deliver Far Greater Returns

Data from the hacks show that there is a growing gap between average losses and extreme cases. This year alone, the largest hack exceeded the median incident by more than 1,000 times. 

This is also the first time the gap crossed that level.

Median crypto hack occurrences are rising Median crypto hack occurrences are rising | source: Chainalysis

Chainalysis also notes that only three attacks caused 69% of all service losses. This concentration shows how single breaches now define yearly outcomes.

In all, smaller incidents still happen but they barely move totals.

North Korea reportedly stole the most from 2022 to date, with these attacks clustered at the highest value ranges. Other criminals also showed a wider spread of smaller thefts.

Laundering Patterns After Major Thefts

Chainalysis also called attention to clear laundering habits from North Korean hackers.

According to the analytics platform, hackers rarely move stolen funds in huge chunks and tend to keep transfers below $500,000.

Other criminals often move funds in larger batches and this contrast helps analysts spot patterns.

They also reportedly used cross-chain bridges heavily, including Celer and Stargate to help move assets across networks.

North Korea-linked actors also tend to avoid lending protocols and peer-to-peer exchanges. They also interact less with decentralised exchanges than other groups.

Related Reading: Pakistani Authorities Arrest 34 in Major Crypto Scam Crackdown

Personal Wallet Theft Hits More Users

Thefts from North Korea now dominate headlines, yet individual users also face heavy risk. Wallet compromises reached about 158,000 incidents and that figure nearly tripled the counts from 2022.

Unique victims climbed to at least 80,000 and adoption growth partly explains the rise. Despite higher counts, total value stolen from individuals fell to $713 million.

That amount dropped from $1.5 billion the year before and attackers may have targeted more users but took less per person.

Solana recorded the highest number of victims (around 26,500) while Ethereum and Tron showed the highest theft rates per active wallet. 

Overall, this year’s thefts show that hackers have developed patience and planning. Fewer attacks caused record losses and that approach may continue.

This all means that crypto crime did not disappear. Instead, its shape changed and those changes might offer clues for prevention.

The post $3.4 Billion Stolen: North Korea Drives Record $2 Billion Crypto Theft Year This year appeared first on Live Bitcoin News.

Market Opportunity
4 Logo
4 Price(4)
$0.01979
$0.01979$0.01979
-0.45%
USD
4 (4) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

The Channel Factories We’ve Been Waiting For

The Channel Factories We’ve Been Waiting For

The post The Channel Factories We’ve Been Waiting For appeared on BitcoinEthereumNews.com. Visions of future technology are often prescient about the broad strokes while flubbing the details. The tablets in “2001: A Space Odyssey” do indeed look like iPads, but you never see the astronauts paying for subscriptions or wasting hours on Candy Crush.  Channel factories are one vision that arose early in the history of the Lightning Network to address some challenges that Lightning has faced from the beginning. Despite having grown to become Bitcoin’s most successful layer-2 scaling solution, with instant and low-fee payments, Lightning’s scale is limited by its reliance on payment channels. Although Lightning shifts most transactions off-chain, each payment channel still requires an on-chain transaction to open and (usually) another to close. As adoption grows, pressure on the blockchain grows with it. The need for a more scalable approach to managing channels is clear. Channel factories were supposed to meet this need, but where are they? In 2025, subnetworks are emerging that revive the impetus of channel factories with some new details that vastly increase their potential. They are natively interoperable with Lightning and achieve greater scale by allowing a group of participants to open a shared multisig UTXO and create multiple bilateral channels, which reduces the number of on-chain transactions and improves capital efficiency. Achieving greater scale by reducing complexity, Ark and Spark perform the same function as traditional channel factories with new designs and additional capabilities based on shared UTXOs.  Channel Factories 101 Channel factories have been around since the inception of Lightning. A factory is a multiparty contract where multiple users (not just two, as in a Dryja-Poon channel) cooperatively lock funds in a single multisig UTXO. They can open, close and update channels off-chain without updating the blockchain for each operation. Only when participants leave or the factory dissolves is an on-chain transaction…
Share
BitcoinEthereumNews2025/09/18 00:09
Elon Musk and Netanyahu Discuss AI and Tesla Plans In Joint Conference

Elon Musk and Netanyahu Discuss AI and Tesla Plans In Joint Conference

TLDR Elon Musk joined a virtual meeting with Israeli PM Netanyahu to talk AI and transportation technology. Israel aims to lead in AI, using strategies from its
Share
Coincentral2025/12/30 03:05
Elon Musk discusses AI development with Israeli Prime Minister Netanyahu

Elon Musk discusses AI development with Israeli Prime Minister Netanyahu

The post Elon Musk discusses AI development with Israeli Prime Minister Netanyahu appeared on BitcoinEthereumNews.com. Key Takeaways Musk and Netanyahu discussed
Share
BitcoinEthereumNews2025/12/30 03:00