North Korean state-backed hackers have stolen more than $2 billion worth of cryptocurrency since the beginning of 2025, according to new research from blockchain analytics firms tracking illicit cyber activities linked to Pyongyang.
The staggering haul underscores how North Korea’s cyber operations have become increasingly sophisticated, targeting exchanges, DeFi platforms, and blockchain infrastructure across multiple countries.
This new estimate, according to blockchain analysis firm Elliptic in a blog post shared on Wednesday, is based on over 30 hacks this year and is the “largest annual total on record, with three months still to go,” according to the business.
North Korea’s $1.35 billion theft in 2022 set the previous record. According to Elliptic, the total amount of cryptocurrency stolen by the regime since 2017 is at least $6 billion; however, that sum may possibly be underestimated.
“The actual figure may be even higher. Attributing cyber thefts to North Korea is not an exact science,” reads the blog post.
“We are aware of many other thefts that share some of the hallmarks of North Korea-linked activity but lack sufficient evidence to be definitively attributed. Other thefts are likely unreported and remain unknown,” said Elliptic.
