Particle.news

Download on the App Store

North Korea-Linked Crypto Thefts Top $2 Billion in 2025, Elliptic Says

Researchers cite a pivot to social engineering with sophisticated cross‑chain laundering.

Overview

  • The February breach of exchange Bybit accounted for about $1.46 billion, with the FBI attributing the hack to North Korea under its TraderTraitor operation.
  • Elliptic counts more than 30 attributed hacks in 2025, including incidents at LND.fi, WOO X, Seedify and Taiwan’s BitoPro.
  • The firm’s tally lifts cumulative North Korea-linked crypto theft since 2017 to over $6 billion.
  • Analysts report a growing focus on high‑net‑worth individuals and exchange staff through phishing, fake job offers and account compromise.
  • Investigators trace increasingly complex laundering that uses multi‑round cross‑chain swaps, mixers, obscure blockchains and self‑issued tokens, while totals may be conservative due to attribution gaps and unreported cases.