North Korean hackers stole a record $2.02 billion in cryptocurrency in 2025.

According to Chainalysis, North Korean hackers stole a record $2.02 billion in cryptocurrency in 2025, a 51% increase from 2024, accounting for 76% of the total global cryptocurrency service thefts that year. While the number of attacks decreased significantly, the profitability of individual attacks increased dramatically, with the Bybit attack in February resulting in a loss of $1.5 billion. Since records began, North Korean entities have stolen a total of $6.75 billion.

Chainalysis's 2026 Cryptocrime Report preview indicates that North Korean hackers have shifted their targets from decentralized finance protocols to core infrastructure such as centralized exchanges. Their money laundering methods are characterized by high frequency and small transactions, with over 60% of funds split into smaller transactions under $500,000. Furthermore, hackers are using social engineering techniques, such as impersonating recruiters or strategic partners, to gain access to systems. Experts urge the industry to adopt behavioral pattern-based monitoring tools to combat increasingly sophisticated state-sponsored cybercrime.