North Korea-Linked Hackers Stole $2.02B in Crypto in 2025, Chainalysis Reports

North Korea–linked hacking groups stole at least $2.02 billion in cryptocurrency in 2025, according to a new report from blockchain analytics firm Chainalysis.

The losses were heavily concentrated in large-scale breaches, with a single attack accounting for the majority of the total.

A February 2025 breach of a major crypto trading platform, which resulted in losses of approximately $1.5 billion, was identified as the largest incident of the year. U.S.

authorities have attributed the attack to DPRK-linked TraderTraitor operators, who allegedly moved and converted portions of the stolen funds into other cryptocurrencies shortly after the breach.

DPRK Share of Global Crypto Theft

Chainalysis estimates that North Korean groups were responsible for 76% of all service-level crypto theft by value in 2025, marking a record share.

Across multiple years, the firm estimates that DPRK-linked actors have stolen a cumulative $6.75 billion in cryptocurrency.

Rather than increasing the number of attacks, these groups reportedly focused on fewer but much larger targets, using tactics such as insider recruitment, executive impersonation, and access to privileged systems within crypto companies.

Laundering Tactics and Fund Movement

Following major thefts, Chainalysis observed a structured laundering cycle lasting roughly 45 days.

Funds are typically moved in multiple waves, with most transactions kept below $500,000 to reduce detection risk.

The stolen crypto is routed through a combination of cross-chain bridges, mixing services, payment intermediaries, and exchanges with weaker KYC controls, including networks connected to Chinese-language payment processors and guarantee services.

Impact on Individual Wallets

In addition to large service breaches, Chainalysis recorded 158,000 theft incidents affecting at least 80,000 personal wallets in 2025.

These incidents accounted for approximately $713 million in losses, a decline from $1.5 billion in 2024.

Personal wallet thefts made up about 20% of total crypto losses in 2025, reflecting a strategic shift toward high-value institutional targets. Security analysts expect attackers to continue balancing large exchange hacks with broader campaigns targeting individual users.