Chainalysis reported that North Korean actors were responsible for a record 76% of all service-level compromises in 2025, excluding individual wallet hacks. These incidents typically target centralized platforms or infrastructure providers rather than end users.
Total global cryptocurrency theft reached approximately $3.4 billion this year, with North Korean operations accounting for nearly 60% of the total. This pushed the regime’s cumulative crypto theft haul to an estimated $6.75 billion, according to the analysis.
While the number of hacking incidents attributed to North Korea declined by 74% compared with 2024, the average size and impact of each breach increased sharply. The report characterizes this as a strategic shift toward more selective, higher-value targets.
Chainalysis did not disclose the specific techniques used in the service-level compromises or name the affected platforms. However, the findings underscore the growing scale and sophistication of North Korean cyber operations within the cryptocurrency ecosystem.
The report is likely to intensify scrutiny around exchange security, cross-border enforcement, and the role of crypto theft in funding sanctioned state activities.
Follow us on Bluesky , LinkedIn , and X to Get Instant Updates

