North Korean hackers looted more than $2 billion in crypto in 2025 alone

North Korean state-backed hackers have stolen more than $2 billion worth of cryptocurrency since the beginning of 2025, according to new research from a blockchain analysis firm that tracks illicit cyber activity linked to Pyongyang.

The surprising haul underscores how North Korea’s cyber operations are becoming increasingly sophisticated, targeting exchanges, DeFi platforms and blockchain infrastructure in multiple countries.

The new estimate, according to blockchain analytics firm Elliptic in a blog post shared on Wednesday, is based on more than 30 hacks this year and is “the largest annual total ever recorded, with three months remaining,” according to the business.

READ ALSO: Cybersecurity experts link North Korean hackers to $1.4 billion crypto theft

North Korea’s $1.35 billion theft in 2022 broke the previous record. According to Elliptic, the total amount of cryptocurrency stolen by the Chinese regime since 2017 amounts to at least $6 billion; however, this number may be underestimated.

“The actual figure may be even higher. Attributing cyber theft to North Korea is not an exact science,” the blog post said.

“We are aware of many other thefts that have similar characteristics to North Korea-related activity, but do not have enough evidence to definitively link them. Other thefts likely went unreported and remain unknown,” Elliptic said.