UN: North Korean Hackers Stole $2B in Crypto in 2025

The UN Sanctions Monitoring Team reported that North Korean-linked hackers stole more than $2 billion in cryptocurrency in 2025, a 51% increase from 2024, and transferred the proceeds into the country’s weapons programs to evade sanctions. The team attributed the higher haul to technical and operational changes rather than an increased number of attacks.

The report identified more advanced tactics, including targeted social engineering and the use of insiders to gain access to exchanges, custodial services and private wallets. Investigators said fewer intrusions produced larger payouts per incident, with attackers focusing on higher-value targets and accounts.

A market tracking “Total Crypto Hack Value in 2026” priced a 70% probability that losses will exceed $1.2 billion, with recent trading showing stable pricing and variability concentrated in contracts tied to higher loss thresholds. The market data reflect trader expectations for continued large-scale thefts in the coming year.

Regulators and major exchanges have tightened controls and added security measures in response, but the UN team reported those efforts have not fully stopped illicit fund flows. The team recommended stepped-up tracing of transfers on blockchain networks and stricter personnel controls at institutions that handle large holdings.

Cybersecurity vendors and blockchain analytics firms are expected to provide updated technical intelligence. The report listed firms such as Chainalysis and CertiK as likely sources of data on attack methods, laundering routes and vulnerable platforms. Analysts flagged continued attention on how compromised accounts, private keys and intermediary services are exploited and on potential insider involvement.

The UN team framed the thefts as linked to state financing priorities and recommended sustained international cooperation on sanctions enforcement, improved due diligence at exchanges and clearer regulatory standards to limit channels for converting stolen cryptocurrency into usable funds.