North Korea stole $800 million in cryptocurrency last year, five times the scale of any other hacker

Voice of America (VOA) reported on the 12th that an analysis has suggested that North Korean hackers were responsible for one-third of all cryptocurrency thefts around the world last year.
According to VOA, the US cryptocurrency analysis and information company TRM Labs has announced in its "2025 Cryptocurrency Crime Report" that "North Korea will account for 100% of the total cryptocurrency by 2024."
"This represents a 17% increase from the previous year, and the total amount stolen from North Korean organizations in 2024 is estimated at $800 million," TRM Lab said.
"The sharp increase in cryptocurrency hacking activity indicates an evolving threat environment in the cryptocurrency space," he said. "As North Korean attacks become more prominent, the industry needs to implement stronger security measures."
In particular, the report said, "On average, the scale of attacks by North Korean hacking groups is about five times larger than that of other hackers."
"These attacks clearly show North Korea's emphasis on high-risk operations," he said. "North Korean hacking organizations and the cryptocurrency money laundering groups they work with are stealing cryptocurrency funds.
"They are increasing and diversifying the means they use to move gold," it added.
When Wallet ceased operations under pressure from U.S. and international law enforcement, North Korea turned to alternative services such as JOYnMarket, Mixiro, and a new independent operator of Wasabi Wallet, and began to commit crimes.
He also cited examples that showed the country's adaptability. "North Korea's cybercrime activities are the most advanced in the world," Ali Redborough, global policy director at TRM Labs, said in a phone call with VOA on the same day.
"No," he said, "North Korean hackers are not state-sponsored, they are the state itself."
"North Korea has established a core organization of specialized cyber criminals who are focused on stealing crypto assets and attacking companies around the world," said the head of the agency. "The theft of crypto assets is a form of banking extortion in the digital age."
"It's the same as theft," he said. He also said that once a hack occurs, the government must work with law enforcement and national security agencies to track and recover the funds, but it may be too late.
He emphasized that because there are so many cases, it is necessary to prevent North Korean hacking and theft of cryptocurrencies from happening in the first place.