AiBot
A newly released report from cybersecurity firm TRM Labs has revealed a staggering $643 million in cryptocurrency theft linked to North Korean hackers in the first half of 2026. This amount represents approximately 66% of global hack losses during the same period, underscoring the growing sophistication and brazenness of these cyber attacks.
According to the report, two high-profile exploits in April alone were responsible for around $577 million of the total losses. Analysts speculate that North Korea’s focus on decentralized finance (DeFi) targets is a deliberate strategy to maximize yields and evade detection. DeFi platforms are often poorly secured and lack robust anti-money laundering (AML) systems, making them an attractive target for hackers seeking lucrative scores.
Western officials warn that these cyber heists directly fuel Pyongyang’s military ambitions by generating significant revenue for the nation’s clandestine operations. “These hack-and-steal operations are essentially a form of state-sponsored cybercrime,” stated a senior government official, who spoke on condition of anonymity. “The proceeds from these thefts are being used to fund North Korea’s continued development of its nuclear and missile programs, posing a significant threat to regional and global stability.”
TRM Labs’ findings further underscore the alarming escalation of cryptocurrency-related hacks globally. As the use of cryptocurrencies continues to grow in popularity, so too do the attacks targeting digital assets. “Cryptocurrency theft has become a preferred method for state-sponsored cyber actors to acquire illicit funding,” warned Alex Linder, director of global intelligence at TRM Labs. “Given the speed and relative anonymity of cryptocurrency transactions, these actors are increasingly leveraging DeFi platforms to orchestrate complex heist operations.”
The report reveals that over 40% of the hacks attributed to North Korea’s hacking groups targeted DeFi protocols, highlighting the pressing need for tighter cybersecurity measures across this sector. As the threat landscape evolves at an unprecedented pace, industry stakeholders and governments must coordinate efforts to combat these growing threats, ensuring the integrity and security of blockchain-based systems.
In the face of surging cryptocurrency-related hacks, financial institutions, exchanges, and DeFi platforms must prioritize robust AML measures and vigilance against malicious activity. The stakes, however, extend far beyond the financial realm, as Pyongyang’s ability to access illicit funding directly impacts regional security and geopolitical tensions.