{"id":125421,"date":"2026-05-14T09:04:42","date_gmt":"2026-05-14T07:04:42","guid":{"rendered":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/"},"modified":"2026-05-14T09:04:42","modified_gmt":"2026-05-14T07:04:42","slug":"north-korea-crypto-thefts-6-75-billion-ten-years","status":"publish","type":"post","link":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/","title":{"rendered":"North Korea Linked to $6.75B in Crypto Thefts Over Ten Years"},"content":{"rendered":"<p>North Korean Hackers Stole $6.75 Billion in Crypto Over Ten Years \u2013 Security Firms Link Activity to State Revenue<\/p>\n\n<span class=\"anchor\" id=\"key-takeaways\" title=\"Key Takeaways\"><\/span><h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n<ul class=\"wp-block-list\"><li>North Korean actors have stolen an estimated $6.75 billion in crypto across 263 incidents between 2016 and early 2026, according to CertiK.<\/li><li>In 2025 alone, $2.06 billion in losses were attributed to North Korea, representing 60% of the sector\u2019s $3.4 billion in total losses.<\/li><li>So far in 2026, $620 million of the $1.1 billion in stolen funds have been linked to North Korean groups.<\/li><li>Major incidents include the $1.5 billion Bybit exploit in 2025 and the $294 million KelpDAO hack in 2026.<\/li><\/ul>\n\n<span class=\"anchor\" id=\"certik-crypto-hacks-integrated-into-north-koreas-revenue-mechanism\" title=\"CertiK: Crypto Hacks Integrated Into North Korea\u2019s Revenue Mechanism\"><\/span><h2 class=\"wp-block-heading\">CertiK: Crypto Hacks Integrated Into North Korea\u2019s Revenue Mechanism<\/h2>\n\n<p>Security research firm CertiK reports that North Korea has incorporated cryptocurrency theft into its state revenue structure. The firm analyzed nearly a decade of activity and identified 263 incidents between 2016 and early 2026 that it attributes to actors linked to the Democratic People\u2019s Republic of Korea.<\/p>\n\n<p>According to CertiK, these operations generated an estimated $6.75 billion over the ten year period. The data shows a sustained and organized pattern rather than isolated attacks. CertiK describes North Korea as the largest single source of crypto related losses in the industry.<\/p>\n\n<p>The figures for recent years underline that concentration. In 2025, North Korean actors were responsible for $2.06 billion in losses. Total losses across the crypto sector that year reached $3.4 billion, meaning roughly 60% of all recorded losses were linked to North Korea.<\/p>\n\n<p>In 2026, the trend has continued. CertiK reports that $620 million of the $1.1 billion in stolen funds so far this year can be attributed to North Korean groups. That represents 55% of total year to date losses.<\/p>\n\n<span class=\"anchor\" id=\"major-incidents-bybit-kelpdao-and-drift\" title=\"Major Incidents: Bybit, KelpDAO and Drift\"><\/span><h2 class=\"wp-block-heading\">Major Incidents: Bybit, KelpDAO and Drift<\/h2>\n\n<p>The scale of individual attacks has increased. In 2025, the largest single incident was the $1.5 billion exploit of Bybit. That attack was linked to the Lazarus group, a well known North Korean hacking organization.<\/p>\n\n<p>In 2026, the largest reported incident so far is the $294 million KelpDAO hack. According to TRM Labs, this operation was carried out by a new North Korean group that is separate from Lazarus. The emergence of additional groups suggests a diversification of operational units rather than reliance on a single entity.<\/p>\n\n<p>Another major case involved Drift, which suffered a $285 million breach. TRM Labs stated that the incident followed in person meetings between North Korean proxies and employees of the protocol. The firm described this method as unprecedented in the country\u2019s crypto hacking campaign. Drift was breached by a group known as TraderTraitor, also linked to North Korea.<\/p>\n\n<p>These cases illustrate that both centralized platforms and decentralized protocols remain targets. For users of exchanges, DeFi platforms, and crypto enabled betting services, such incidents can affect liquidity, withdrawals, and operational stability.<\/p>\n\n<span class=\"anchor\" id=\"trm-labs-north-koreas-share-of-2026-losses-potentially-higher\" title=\"TRM Labs: North Korea\u2019s Share of 2026 Losses Potentially Higher\"><\/span><h2 class=\"wp-block-heading\">TRM Labs: North Korea\u2019s Share of 2026 Losses Potentially Higher<\/h2>\n\n<p>While CertiK places North Korea\u2019s share of 2026 year to date losses at 55%, TRM Labs estimates the proportion may be significantly higher. According to TRM Labs, North Korean actors account for approximately 76% of total losses so far in 2026.<\/p>\n\n<p>The difference in estimates reflects varying methodologies, but both firms agree on the dominant role of North Korean groups in current crypto crime statistics. For market participants, this concentration means that a limited number of state linked actors are responsible for the majority of high value breaches.<\/p>\n\n<span class=\"anchor\" id=\"tactics-infiltration-and-structured-laundering\" title=\"Tactics: Infiltration and Structured Laundering\"><\/span><h2 class=\"wp-block-heading\">Tactics: Infiltration and Structured Laundering<\/h2>\n\n<p>Security firms report that North Korean actors have adapted their methods. In some cases, they have posed as IT employees to gain internal access to decentralized exchanges and platforms. This insider approach allows attackers to bypass certain external security layers.<\/p>\n\n<p>After executing a hack, the groups typically pause before beginning laundering operations. Funds are often converted into Bitcoin and moved through crypto mixers such as Thorchain or Tornado Cash. They also use decentralized exchanges and over the counter desks to obscure transaction trails.<\/p>\n\n<p>This multi step laundering process complicates recovery efforts and increases the time needed for forensic tracing. For platforms handling large volumes of crypto transactions, monitoring cross chain movements and mixer activity has become a central part of risk management.<\/p>\n\n<span class=\"anchor\" id=\"regulatory-and-monitoring-responses\" title=\"Regulatory and Monitoring Responses\"><\/span><h2 class=\"wp-block-heading\">Regulatory and Monitoring Responses<\/h2>\n\n<p>The scale of losses has prompted efforts to strengthen early threat detection across blockchains. Security companies are expanding monitoring systems designed to identify suspicious wallet behavior before funds are fully laundered.<\/p>\n\n<p>According to the report, the United States government is considering extending threat intelligence that is currently shared with financial institutions to crypto companies. Such a move would formally integrate parts of the crypto industry into existing national security information frameworks.<\/p>\n\n<p>For operators in crypto betting, online casinos, and other iGaming services that rely on digital assets, expanded intelligence sharing could affect compliance procedures and reporting standards. Platforms may face additional expectations regarding wallet screening and transaction monitoring.<\/p>\n\n<span class=\"anchor\" id=\"our-assessment\" title=\"Our Assessment\"><\/span><h2 class=\"wp-block-heading\">Our Assessment<\/h2>\n\n<p>The data from CertiK and TRM Labs shows that North Korean linked actors have accounted for a majority of global crypto thefts in recent years, with $6.75 billion stolen over a decade and a dominant share of losses in both 2025 and 2026. The combination of large scale exchange breaches, DeFi exploits, and evolving infiltration tactics highlights a sustained and organized campaign. For users and operators across the crypto ecosystem, including betting and iGaming platforms, the figures underscore the concentration of risk in a small number of state linked threat actors and the growing role of coordinated monitoring and intelligence sharing.<\/p>\n\n<div class=\"gambling-disclaimer\">\n\t<p>\n\t\tWe have imposed strict editorial guidelines on ourselves and explain our testing methods openly and comprehensively. We also communicate transparently how our work is financed. This site may contain tracking links, but this does not influence our objective view in any way.\t<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Security firms attribute $6.75 billion in crypto thefts over the past decade to North Korean actors. In 2025 and 2026, they accounted for the majority of reported sector losses.<\/p>\n","protected":false},"author":8,"featured_media":125420,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[],"tags":[],"news_crypto_coin":[],"class_list":["post-125421","post","type-post","status-publish","format-standard","has-post-thumbnail"],"acf":{"faqs":null,"sort_number":999,"sort_number_no_override":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.0 (Yoast SEO v27.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>North Korea Crypto Thefts Reach $6.75B<\/title>\n<meta name=\"description\" content=\"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kryptocasinos.com EN\" \/>\n<meta property=\"og:description\" content=\"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\" \/>\n<meta property=\"og:site_name\" content=\"Kryptocasinos.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/kryptocasinoscomm\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-14T07:04:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1408\" \/>\n\t<meta property=\"og:image:height\" content=\"736\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Isabella Brown\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Isabella Brown\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\"},\"author\":{\"name\":\"Isabella Brown\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/person\/badee6a5ed8b6777da5bd380d112bcdc\"},\"headline\":\"North Korea Linked to $6.75B in Crypto Thefts Over Ten Years\",\"datePublished\":\"2026-05-14T09:04:42+02:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\"},\"wordCount\":881,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#respond\"]}],\"description\":\"\",\"isAccessibleForFree\":true,\"articleBody\":\"North Korean Hackers Stole $6.75 Billion in Crypto Over Ten Years - Security Firms Link Activity to State Revenue\\n\\nKey Takeaways\\n\\nNorth Korean actors have stolen an estimated $6.75 billion in crypto across 263 incidents between 2016 and early 2026, according to CertiK.In 2025 alone, $2.06 billion in losses were attributed to North Korea, representing 60% of the sector\u2019s $3.4 billion in total losses.So far in 2026, $620 million of the $1.1 billion in stolen funds have been linked to North Korean groups.Major incidents include the $1.5 billion Bybit exploit in 2025 and the $294 million KelpDAO hack in 2026.\\n\\nCertiK: Crypto Hacks Integrated Into North Korea\u2019s Revenue Mechanism\\n\\nSecurity research firm CertiK reports that North Korea has incorporated cryptocurrency theft into its state revenue structure. The firm analyzed nearly a decade of activity and identified 263 incidents between 2016 and early 2026 that it attributes to actors linked to the Democratic People\u2019s Republic of Korea.\\n\\nAccording to CertiK, these operations generated an estimated $6.75 billion over the ten year period. The data shows a sustained and organized pattern rather than isolated attacks. CertiK describes North Korea as the largest single source of crypto related losses in the industry.\\n\\nThe figures for recent years underline that concentration. In 2025, North Korean actors were responsible for $2.06 billion in losses. Total losses across the crypto sector that year reached $3.4 billion, meaning roughly 60% of all recorded losses were linked to North Korea.\\n\\nIn 2026, the trend has continued. CertiK reports that $620 million of the $1.1 billion in stolen funds so far this year can be attributed to North Korean groups. That represents 55% of total year to date losses.\\n\\nMajor Incidents: Bybit, KelpDAO and Drift\\n\\nThe scale of individual attacks has increased. In 2025, the largest single incident was the $1.5 billion exploit of Bybit. That attack was linked to the Lazarus group, a well known North Korean hacking organization.\\n\\nIn 2026, the largest reported incident so far is the $294 million KelpDAO hack. According to TRM Labs, this operation was carried out by a new North Korean group that is separate from Lazarus. The emergence of additional groups suggests a diversification of operational units rather than reliance on a single entity.\\n\\nAnother major case involved Drift, which suffered a $285 million breach. TRM Labs stated that the incident followed in person meetings between North Korean proxies and employees of the protocol. The firm described this method as unprecedented in the country\u2019s crypto hacking campaign. Drift was breached by a group known as TraderTraitor, also linked to North Korea.\\n\\nThese cases illustrate that both centralized platforms and decentralized protocols remain targets. For users of exchanges, DeFi platforms, and crypto enabled betting services, such incidents can affect liquidity, withdrawals, and operational stability.\\n\\nTRM Labs: North Korea\u2019s Share of 2026 Losses Potentially Higher\\n\\nWhile CertiK places North Korea\u2019s share of 2026 year to date losses at 55%, TRM Labs estimates the proportion may be significantly higher. According to TRM Labs, North Korean actors account for approximately 76% of total losses so far in 2026.\\n\\nThe difference in estimates reflects varying methodologies, but both firms agree on the dominant role of North Korean groups in current crypto crime statistics. For market participants, this concentration means that a limited number of state linked actors are responsible for the majority of high value breaches.\\n\\nTactics: Infiltration and Structured Laundering\\n\\nSecurity firms report that North Korean actors have adapted their methods. In some cases, they have posed as IT employees to gain internal access to decentralized exchanges and platforms. This insider approach allows attackers to bypass certain external security layers.\\n\\nAfter executing a hack, the groups typically pause before beginning laundering operations. Funds are often converted into Bitcoin and moved through crypto mixers such as Thorchain or Tornado Cash. They also use decentralized exchanges and over the counter desks to obscure transaction trails.\\n\\nThis multi step laundering process complicates recovery efforts and increases the time needed for forensic tracing. For platforms handling large volumes of crypto transactions, monitoring cross chain movements and mixer activity has become a central part of risk management.\\n\\nRegulatory and Monitoring Responses\\n\\nThe scale of losses has prompted efforts to strengthen early threat detection across blockchains. Security companies are expanding monitoring systems designed to identify suspicious wallet behavior before funds are fully laundered.\\n\\nAccording to the report, the United States government is considering extending threat intelligence that is currently shared with financial institutions to crypto companies. Such a move would formally integrate parts of the crypto industry into existing national security information frameworks.\\n\\nFor operators in crypto betting, online casinos, and other iGaming services that rely on digital assets, expanded intelligence sharing could affect compliance procedures and reporting standards. Platforms may face additional expectations regarding wallet screening and transaction monitoring.\\n\\nOur Assessment\\n\\nThe data from CertiK and TRM Labs shows that North Korean linked actors have accounted for a majority of global crypto thefts in recent years, with $6.75 billion stolen over a decade and a dominant share of losses in both 2025 and 2026. The combination of large scale exchange breaches, DeFi exploits, and evolving infiltration tactics highlights a sustained and organized campaign. For users and operators across the crypto ecosystem, including betting and iGaming platforms, the figures underscore the concentration of risk in a small number of state linked threat actors and the growing role of coordinated monitoring and intelligence sharing.\\n\\n\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\",\"url\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\",\"name\":\"North Korea Crypto Thefts Reach $6.75B\",\"isPartOf\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg\",\"datePublished\":\"2026-05-14T09:04:42+02:00\",\"description\":\"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage\",\"url\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg\",\"contentUrl\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg\",\"width\":1408,\"height\":736,\"caption\":\"Dark hooded figure typing on laptop with digital padlock and cryptocurrency symbols floating around.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.kryptocasinos.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"North Korea Linked to $6.75B in Crypto Thefts Over Ten Years\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#website\",\"url\":\"https:\/\/www.kryptocasinos.com\/en\/\",\"name\":\"Kryptocasinos.com\",\"description\":\"\",\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#organization\",\"name\":\"Kryptocasinos.com\",\"url\":\"https:\/\/www.kryptocasinos.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2025\/06\/kryptocasinos-com-logo.svg\",\"contentUrl\":\"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2025\/06\/kryptocasinos-com-logo.svg\",\"width\":109,\"height\":34,\"caption\":\"Kryptocasinos.com\"},\"image\":{\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/kryptocasinoscomm\/\"],\"description\":\"Discover top-rated crypto casinos for %%currentyear%% with fast Bitcoin payouts, trustworthy security, and fair bonuses. See which casinos truly deliver.\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"557 Fuk Wing St\",\"addressLocality\":\"Cheung Sha Wan\",\"addressRegion\":\"HK\",\"postalCode\":\"999077\",\"addressCountry\":\"CN\"},\"contactPoint\":{\"@type\":\"ContactPoint\",\"email\":\"contact@kryptocasinos.com\"},\"foundingDate\":\"2021-03-27\",\"email\":\"hello@kryptocasinos.com\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"publishingPrinciples\":\"https:\/\/www.kryptocasinos.com\/en\/editorial-guidelines\/\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/person\/badee6a5ed8b6777da5bd380d112bcdc\",\"name\":\"Isabella Brown\",\"description\":\"Online Gambling, Greece and my dog Gringo are my three favorite things in my life. Before working for Kryptocasinos.com I was leading the content team of an iGaming Online magazine where I was focused on researching casinos, their licenses and the connection between the members of the industry.\",\"birthDate\":\"1995-02-13\",\"url\":\"https:\/\/www.kryptocasinos.com\/en\/author\/isabella\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"North Korea Crypto Thefts Reach $6.75B","description":"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/","og_type":"article","og_title":"Kryptocasinos.com EN","og_description":"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.","og_url":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/","og_site_name":"Kryptocasinos.com","article_publisher":"https:\/\/www.facebook.com\/kryptocasinoscomm\/","article_published_time":"2026-05-14T07:04:42+00:00","og_image":[{"width":1408,"height":736,"url":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg","type":"image\/jpeg"}],"author":"Isabella Brown","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Isabella Brown","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#article","isPartOf":{"@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/"},"author":{"name":"Isabella Brown","@id":"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/person\/badee6a5ed8b6777da5bd380d112bcdc"},"headline":"North Korea Linked to $6.75B in Crypto Thefts Over Ten Years","datePublished":"2026-05-14T09:04:42+02:00","mainEntityOfPage":{"@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/"},"wordCount":881,"commentCount":0,"publisher":{"@id":"https:\/\/www.kryptocasinos.com\/en\/#organization"},"image":{"@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#respond"]}],"description":"","isAccessibleForFree":true,"articleBody":"North Korean Hackers Stole $6.75 Billion in Crypto Over Ten Years - Security Firms Link Activity to State Revenue\n\nKey Takeaways\n\nNorth Korean actors have stolen an estimated $6.75 billion in crypto across 263 incidents between 2016 and early 2026, according to CertiK.In 2025 alone, $2.06 billion in losses were attributed to North Korea, representing 60% of the sector\u2019s $3.4 billion in total losses.So far in 2026, $620 million of the $1.1 billion in stolen funds have been linked to North Korean groups.Major incidents include the $1.5 billion Bybit exploit in 2025 and the $294 million KelpDAO hack in 2026.\n\nCertiK: Crypto Hacks Integrated Into North Korea\u2019s Revenue Mechanism\n\nSecurity research firm CertiK reports that North Korea has incorporated cryptocurrency theft into its state revenue structure. The firm analyzed nearly a decade of activity and identified 263 incidents between 2016 and early 2026 that it attributes to actors linked to the Democratic People\u2019s Republic of Korea.\n\nAccording to CertiK, these operations generated an estimated $6.75 billion over the ten year period. The data shows a sustained and organized pattern rather than isolated attacks. CertiK describes North Korea as the largest single source of crypto related losses in the industry.\n\nThe figures for recent years underline that concentration. In 2025, North Korean actors were responsible for $2.06 billion in losses. Total losses across the crypto sector that year reached $3.4 billion, meaning roughly 60% of all recorded losses were linked to North Korea.\n\nIn 2026, the trend has continued. CertiK reports that $620 million of the $1.1 billion in stolen funds so far this year can be attributed to North Korean groups. That represents 55% of total year to date losses.\n\nMajor Incidents: Bybit, KelpDAO and Drift\n\nThe scale of individual attacks has increased. In 2025, the largest single incident was the $1.5 billion exploit of Bybit. That attack was linked to the Lazarus group, a well known North Korean hacking organization.\n\nIn 2026, the largest reported incident so far is the $294 million KelpDAO hack. According to TRM Labs, this operation was carried out by a new North Korean group that is separate from Lazarus. The emergence of additional groups suggests a diversification of operational units rather than reliance on a single entity.\n\nAnother major case involved Drift, which suffered a $285 million breach. TRM Labs stated that the incident followed in person meetings between North Korean proxies and employees of the protocol. The firm described this method as unprecedented in the country\u2019s crypto hacking campaign. Drift was breached by a group known as TraderTraitor, also linked to North Korea.\n\nThese cases illustrate that both centralized platforms and decentralized protocols remain targets. For users of exchanges, DeFi platforms, and crypto enabled betting services, such incidents can affect liquidity, withdrawals, and operational stability.\n\nTRM Labs: North Korea\u2019s Share of 2026 Losses Potentially Higher\n\nWhile CertiK places North Korea\u2019s share of 2026 year to date losses at 55%, TRM Labs estimates the proportion may be significantly higher. According to TRM Labs, North Korean actors account for approximately 76% of total losses so far in 2026.\n\nThe difference in estimates reflects varying methodologies, but both firms agree on the dominant role of North Korean groups in current crypto crime statistics. For market participants, this concentration means that a limited number of state linked actors are responsible for the majority of high value breaches.\n\nTactics: Infiltration and Structured Laundering\n\nSecurity firms report that North Korean actors have adapted their methods. In some cases, they have posed as IT employees to gain internal access to decentralized exchanges and platforms. This insider approach allows attackers to bypass certain external security layers.\n\nAfter executing a hack, the groups typically pause before beginning laundering operations. Funds are often converted into Bitcoin and moved through crypto mixers such as Thorchain or Tornado Cash. They also use decentralized exchanges and over the counter desks to obscure transaction trails.\n\nThis multi step laundering process complicates recovery efforts and increases the time needed for forensic tracing. For platforms handling large volumes of crypto transactions, monitoring cross chain movements and mixer activity has become a central part of risk management.\n\nRegulatory and Monitoring Responses\n\nThe scale of losses has prompted efforts to strengthen early threat detection across blockchains. Security companies are expanding monitoring systems designed to identify suspicious wallet behavior before funds are fully laundered.\n\nAccording to the report, the United States government is considering extending threat intelligence that is currently shared with financial institutions to crypto companies. Such a move would formally integrate parts of the crypto industry into existing national security information frameworks.\n\nFor operators in crypto betting, online casinos, and other iGaming services that rely on digital assets, expanded intelligence sharing could affect compliance procedures and reporting standards. Platforms may face additional expectations regarding wallet screening and transaction monitoring.\n\nOur Assessment\n\nThe data from CertiK and TRM Labs shows that North Korean linked actors have accounted for a majority of global crypto thefts in recent years, with $6.75 billion stolen over a decade and a dominant share of losses in both 2025 and 2026. The combination of large scale exchange breaches, DeFi exploits, and evolving infiltration tactics highlights a sustained and organized campaign. For users and operators across the crypto ecosystem, including betting and iGaming platforms, the figures underscore the concentration of risk in a small number of state linked threat actors and the growing role of coordinated monitoring and intelligence sharing.\n\n"},{"@type":"WebPage","@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/","url":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/","name":"North Korea Crypto Thefts Reach $6.75B","isPartOf":{"@id":"https:\/\/www.kryptocasinos.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage"},"image":{"@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg","datePublished":"2026-05-14T09:04:42+02:00","description":"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#primaryimage","url":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg","contentUrl":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2026\/05\/north-korea-crypto-thefts-6-75-billion-ten-years.jpg","width":1408,"height":736,"caption":"Dark hooded figure typing on laptop with digital padlock and cryptocurrency symbols floating around."},{"@type":"BreadcrumbList","@id":"https:\/\/www.kryptocasinos.com\/en\/news\/north-korea-crypto-thefts-6-75-billion-ten-years\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.kryptocasinos.com\/en\/"},{"@type":"ListItem","position":2,"name":"North Korea Linked to $6.75B in Crypto Thefts Over Ten Years"}]},{"@type":"WebSite","@id":"https:\/\/www.kryptocasinos.com\/en\/#website","url":"https:\/\/www.kryptocasinos.com\/en\/","name":"Kryptocasinos.com","description":"","inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.kryptocasinos.com\/en\/#organization","name":"Kryptocasinos.com","url":"https:\/\/www.kryptocasinos.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2025\/06\/kryptocasinos-com-logo.svg","contentUrl":"https:\/\/www.kryptocasinos.com\/wp-content\/uploads\/2025\/06\/kryptocasinos-com-logo.svg","width":109,"height":34,"caption":"Kryptocasinos.com"},"image":{"@id":"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/kryptocasinoscomm\/"],"description":"Discover top-rated crypto casinos for %%currentyear%% with fast Bitcoin payouts, trustworthy security, and fair bonuses. See which casinos truly deliver.","address":{"@type":"PostalAddress","streetAddress":"557 Fuk Wing St","addressLocality":"Cheung Sha Wan","addressRegion":"HK","postalCode":"999077","addressCountry":"CN"},"contactPoint":{"@type":"ContactPoint","email":"contact@kryptocasinos.com"},"foundingDate":"2021-03-27","email":"hello@kryptocasinos.com","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"publishingPrinciples":"https:\/\/www.kryptocasinos.com\/en\/editorial-guidelines\/"},{"@type":"Person","@id":"https:\/\/www.kryptocasinos.com\/en\/#\/schema\/person\/badee6a5ed8b6777da5bd380d112bcdc","name":"Isabella Brown","description":"Online Gambling, Greece and my dog Gringo are my three favorite things in my life. Before working for Kryptocasinos.com I was leading the content team of an iGaming Online magazine where I was focused on researching casinos, their licenses and the connection between the members of the industry.","birthDate":"1995-02-13","url":"https:\/\/www.kryptocasinos.com\/en\/author\/isabella\/"}]}},"yoast_meta":{"_yoast_wpseo_primary_category":"","_yoast_wpseo_title":"North Korea Crypto Thefts Reach $6.75B","_yoast_wpseo_metadesc":"Security firms report North Korea linked to $6.75 billion in crypto thefts since 2016, accounting for the majority of sector losses in 2025 and 2026."},"_links":{"self":[{"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/posts\/125421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/comments?post=125421"}],"version-history":[{"count":0,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/posts\/125421\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/media\/125420"}],"wp:attachment":[{"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/media?parent=125421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/categories?post=125421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/tags?post=125421"},{"taxonomy":"news_crypto_coin","embeddable":true,"href":"https:\/\/www.kryptocasinos.com\/en\/wp-json\/wp\/v2\/news_crypto_coin?post=125421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}