North Korea crypto theft surges as Elliptic reports $2B in 2025
North Korea crypto theft surges as Elliptic reports $2B in 2025
North Korea crypto theft has surged: Elliptic reported more than $2 billion stolen in 2025 and about $6 billion since 2017, figures described as alleged totals in some accounts. On 10 February 2025, Bybit disclosed a major security breach that initial reports put at roughly $1.46 billion. Subsequent on-chain analysis by blockchain forensics teams suggested a higher overall toll for 2025. In particular, Elliptic's work underpins the headline figure. See our coverage of the Bybit exchange hack and the wider Elliptic findings at Elliptic report 2025.
Article Summary
**North Korea Cryptocurrency Theft Reaches $2 Billion in 2025, Elliptic Report Reveals** North Korean hackers have dramatically escalated cryptocurrency theft operations, stealing over $2 billion in 2025 alone according to blockchain analytics firm Elliptic. The devastating figure brings total North Korean crypto theft to approximately $6 billion since 2017, highlighting escalating cybersecurity threats facing the digital asset ecosystem. The surge was punctuated by a massive security breach at Bybit exchange on February 10, 2025, with initial reports estimating $1.46 billion stolen. However, subsequent blockchain forensics analysis suggests even higher losses, contributing to Elliptic's staggering $2 billion annual total. These cryptocurrency thefts represent sophisticated attacks targeting Bitcoin, DeFi protocols, and various digital assets across blockchain networks. The incidents underscore critical vulnerabilities in crypto infrastructure and exchange security systems. Market implications include heightened regulatory scrutiny, potential price volatility, and increased demand for robust cybersecurity measures. The scale of North Korean crypto theft operations poses significant challenges for the cryptocurrency industry, exchanges, and blockchain security protocols. Enhanced forensics capabilities and improved security frameworks become increasingly crucial as cybercriminals target the expanding digital asset market.
