North Korean hackers stole over $ 2.84 billion in cryptocurrency in just one year

Hackers affiliated with the North Korean government stole crypto assets worth about $ 2.84 billion between January 2024 and September 2025. This is stated in a new report of UN member states prepared by the Multilateral Sanctions Monitoring Team (MSMT).

According to the document, the state groups TraderTraitor and CryptoCore, which are subordinated to the DPRK’s General Intelligence Directorate, are involved in large-scale cyber thefts. They used phishing methods, attacks on software supply chains, and malware to hack crypto exchanges around the world. The proceeds, according to experts, were used to finance banned weapons programs.

The largest incidents include the theft of $ 308 million from the Japanese exchange DMM Bitcoin in May through a fake employment test, and the theft of $ 235 million from the Indian platform WazirX in July through manipulation of smart contracts. In 2024, the total amount of losses reached $ 1.19 billion, 50% more than in 2023.

In 2025, the activity of attackers increased even more: by September, they had stolen $ 1.65 billion, with the lion’s share ($ 1.46 billion) coming from the Bybit hack in February. According to the report, the stolen funds were converted into fiat currency through intermediaries in China and Russia by September.

The UN is calling on banks and crypto platforms around the world to block wallets linked to the DPRK and deport North Korean IT workers involved in cyber operations. Experts note that the actual amount of stolen assets may be even higher, as some incidents remain unconfirmed or under investigation.