December 24, 2025
By Anjali Kochhar
North Korea has emerged as the world’s most prolific state-backed crypto thief, recording a historic year for cybercrime in 2025. According to blockchain intelligence firm Chainalysis, hackers linked to the Democratic People’s Republic of Korea stole more than $2 billion worth of cryptocurrency this year alone, marking the largest annual crypto theft ever attributed to a single country.
With this latest surge, North Korea’s total cryptocurrency haul since tracking began has climbed close to $6.75 billion. Analysts say the stolen funds are widely believed to support the country’s sanctioned economy, including weapons development programs, making crypto theft a critical geopolitical concern.
Despite the sharp rise in stolen value, the total number of hacking incidents linked to North Korea declined in 2025. Experts say this reflects a strategic shift toward fewer but far more lucrative attacks. Instead of targeting smaller decentralised finance platforms, North Korean cyber groups increasingly focused on centralised exchanges and custodial services, where security breaches can yield massive payouts.
One of the most significant incidents this year was a high-profile breach of a major global crypto exchange, which resulted in the theft of roughly $1.5 billion in digital assets. The single attack accounted for a substantial portion of the total amount stolen in 2025 and highlighted the growing sophistication of these cyber operations.
Chainalysis noted that North Korea was responsible for more than three quarters of all service-level crypto hacks recorded during the year. These attacks often involved extensive planning, social engineering, and insider infiltration. In some cases, operatives reportedly posed as job applicants or contractors to gain internal access to crypto firms before executing the thefts.
Once funds are stolen, laundering remains a key challenge for investigators. North Korean hackers are known to move assets through a complex network of wallets, cross-chain bridges, and mixing services to conceal their origin. This process often unfolds over several weeks, making recovery difficult even with advanced blockchain tracking tools.
At the same time, individual crypto users were not spared. More than 150,000 personal wallet compromises were recorded globally in 2025. While the overall value stolen from individuals declined compared to previous years, the sheer number of victims highlights persistent vulnerabilities in user security practices.
The scale of North Korea’s crypto thefts has raised fresh concerns among regulators and industry leaders. Authorities warn that state-sponsored cybercrime threatens the stability and credibility of digital asset markets, while reinforcing calls for stronger security standards and international cooperation to counter illicit activity.
About the author
Anjali Kochhar covers cryptocurrency and blockchain stories in India as well as globally. Having been in the field of media and journalism for over four years now, she has developed a sharp news sense and works hard to present information that goes beyond the obvious. She is an avid reader and loves writing on a wide range of subjects.
