North Korea-Linked Hackers Behind 76% of Crypto Heists This Year, $6 Billion Stolen Since 2017
Summary
- TRM Labs said North Korea-linked hacking groups accounted for 76%% of global cryptocurrency hacks this year and stole about $600 million.
- TRM Labs said the cumulative cryptocurrency theft by North Korea-linked hacking groups from 2017 through this year exceeded $6 billion.
- TRM Labs said North Korea's cryptocurrency theft operations are becoming more sophisticated, citing major cases including the Drift hack and the KelpDAO hack.
Forecast Trend Report by Period
North Korea-linked hacking groups were behind 76% of cryptocurrency hacks worldwide so far this year, a new report found.
CoinDesk reported on April 30 that blockchain analytics firm TRM Labs said North Korean hacking groups, including DPRK and Lazarus, accounted for about 76% of crypto-related hacking incidents this year. The groups have stolen about $600 million in cryptocurrency so far in 2026.
From 2017 through this year, the cumulative value of cryptocurrency stolen by North Korea-linked hacking groups has exceeded $6 billion over roughly nine years. TRM Labs said North Korea's crypto theft operations are becoming more sophisticated, adding that the country is moving faster and with greater precision than ever.
One prominent example was the Drift hack. Social engineering techniques were used over several months in the attack, which caused about $285 million in losses, TRM Labs said. A representative of the North Korean hacking group met Drift employees several times to build trust before carrying out the hack.
The KelpDAO hack unfolded differently. TRM Labs said the attack, which caused about $292 million in losses, exploited a single-validator vulnerability that LayerZero had repeatedly warned about.
JOON HYOUNG LEE
gilson@bloomingbit.ioCrypto Journalist based in Seoul
