North Korea’s elite cyber units have shattered previous records by stealing $2.02 billion in cryptocurrency in 2025, according to the latest Chainalysis Crypto Crime Report. This figure represents a 51% increase over the regime’s 2024 haul and accounts for nearly 60% of all global crypto thefts this year.

The Democratic People’s Republic of Korea (DPRK) has now stolen an estimated $6.75 billion in crypto assets since it began targeting blockchain infrastructure. While the total number of attacks declined in 2025, the scale and precision of each heist grew dramatically. The most devastating incident occurred in February, when North Korean hackers infiltrated the Dubai-based exchange Bybit, stealing $1.5 billion, primarily in Ethereum.

According to Chainalysis, DPRK hackers are increasingly favoring low-frequency, high-impact operations, often embedding IT contractors inside crypto firms or impersonating executives to gain privileged access. Once inside, they deploy sophisticated malware and social engineering tactics to compromise wallets, drain funds, and launder assets through Chinese-language mixing services, bridge protocols, and multi-stage laundering cycles that span up to 45 days.

The report also highlights a surge in individual wallet compromises, with 158,000 incidents affecting 80,000 unique victims. Although the total value stolen from individuals dropped to $713 million, the volume of attacks underscores the growing risk to retail investors and small exchanges.

Security experts warn that North Korea’s evolving tactics—especially its ability to bypass KYC protocols and exploit DeFi platforms—pose a significant threat to the global financial ecosystem. Chainalysis calls for tighter controls, improved threat intelligence sharing, and stronger authentication mechanisms across crypto services.

As the DPRK continues to weaponize cybercrime to fund its regime, the crypto industry faces mounting pressure to adapt. The 2025 figures mark not just a record-breaking year, but a turning point in the geopolitical implications of blockchain security.