North Korea and Its Cyber Threats: How the Country Continues to Steal Billions Through Cryptocurrency Attacks

FinancialMediaGuide notes that North Korea, in recent years, has become not only a politically isolated state but also one of the most active threats to the global financial system. As the cryptocurrency economy has grown, the country has used high-tech methods to achieve its economic goals. In 2025, North Korea once again set a record for cryptocurrency theft, stealing over $2 billion. This event confirms that threats from states supporting cybercrime are only intensifying, and security measures in the cryptocurrency markets need urgent modernization.

According to the latest report from Chainalysis, North Korea continues to carry out large-scale cyberattacks targeting cryptocurrency assets worldwide. In 2025, the total amount stolen was $2.02 billion. This marks a significant increase compared to previous years and further proves that North Korean hackers, operating on behalf of the state, are becoming increasingly skilled and sophisticated. According to FinancialMediaGuide analysts, the scale of cryptocurrency thefts has never been this large in history, raising concerns among major financial players.

At FinancialMediaGuide, we believe that this increase in cybercrime can be explained by several factors. First, international sanctions limiting North Korea’s access to traditional financial systems have forced it to find alternative ways to bypass these restrictions. In this context, cryptocurrencies have become a convenient tool to finance prohibited programs, such as missile and nuclear technology development. Second, the technical expertise of North Korean hackers has significantly improved in recent years, making their attacks more successful and harder to detect.

One example of such an attack was the hacking of the Bybit cryptocurrency exchange, registered in Dubai. In February 2025, hackers, likely acting on behalf of the North Korean government, stole $1.5 billion, mostly in Ethereum. This incident demonstrated how effectively North Korea uses its cyber resources to advance its state interests. We at FinancialMediaGuide emphasize that such operations are becoming increasingly complex and difficult to trace, requiring cryptocurrency exchanges and financial institutions to adopt higher security measures.

Interestingly, according to the latest data, criminals are increasingly using new methods to deceive security systems. For instance, North Korean hackers are often taking remote jobs at international companies. This strategy not only allows them to bypass security systems but also grants them access to personal data and cryptocurrency wallets. We at FinancialMediaGuide see this as a growing problem for cryptocurrency platforms worldwide, as it opens up new avenues for committing crimes without leaving traces.

Equally important is that cyberattacks related to state interests have distinctive features. They are organized not by individual hackers but by entire groups supported by powerful infrastructure and resources. This means that such attacks are not only more frequent but also more powerful, significantly complicating the fight against them. At FinancialMediaGuide, we emphasize that, in the context of globalization and the interdependence of financial systems, these threats are becoming more urgent, and measures to protect cryptocurrency assets must be urgently strengthened.

Looking ahead, we at FinancialMediaGuide are confident that cyber threats related to cryptocurrencies will continue to rise. In 2026, we expect an increase in attacks on international cryptocurrency platforms and financial systems. This will require all participants in the cryptocurrency market to adopt stricter security measures and actively cooperate with international bodies to create effective protective mechanisms.

It should be noted that to minimize risks, countries and financial organizations must actively work on improving legislation and enhancing international cooperation in cybersecurity. It is essential for cryptocurrency platforms to continue implementing innovative protection methods against attacks and increase the transparency of their operations. We at FinancialMediaGuide believe these measures will be critically important in the future, as state-sponsored cybercrime will only become more dangerous and sophisticated.

Given these circumstances, we predict that 2026 will be a decisive year for the international cryptocurrency community. The adoption of effective regulatory measures and protective technologies will be crucial for maintaining the stability of the global financial system. It is important to understand that cryptocurrencies are no longer just an alternative to traditional finance, but a key tool in the global economy. Therefore, the security of cryptocurrency operations is taking center stage.

We at Financial Media Guide can assert that with the rise of threats from states like North Korea, cryptocurrency exchanges and financial organizations must be prepared for new, more complex challenges. Only through collective efforts and the implementation of innovative technologies can the necessary security be provided for all participants in the cryptocurrency market.

Share This Article