North Korean hackers stole 60% of crypto in 2025

North Korean hackers stole 60% of global crypto lost in 2025, totaling $2.06B. Their attacks are now industrial-scale, using social engineering and advanced laundering.

Multiple blockchain security firms, including CertiK, Chainalysis, and Elliptic, report that North Korean-linked hackers were responsible for about 60% of all global crypto theft losses in 2025. This equated to roughly $2.06 billion out of $3.4 billion stolen that year. Since 2016, these groups have accumulated $6.75 billion in stolen digital assets across 263 incidents. The trend has persisted into 2026, with North Korean activity accounting for 55% of global crypto losses since January. Their operations have evolved from isolated attacks to highly organized, industrial-scale campaigns. These involve long-term planning, specialized teams, and sophisticated laundering methods, such as mixers, decentralized exchanges, and cross-chain transfers. Social engineering has become the primary attack vector, as seen in high-profile cases like the Drift Protocol and KelpDAO hacks. The rapid movement of stolen funds—over 86% laundered within a month in some cases—demonstrates the advanced infrastructure supporting these operations.