Chainalysis: DPRK-linked hackers stole $2.02B in crypto in 2025, using cross‑chain bridges, mixers and 45‑day laundering waves
first published 2025-12-18T13:01:11Z
Chainalysis says North Korea–linked groups have stolen $2.02 billion in cryptocurrency so far in 2025 (a 51% increase year-over-year), accounting for 59% of the $3.4 billion total crypto thefts this year. Attacks are fewer but larger (including a FBI-linked $1.5B February Bybit breach). Attackers follow a three-wave, 45-day laundering pattern using Chinese-language services, cross‑chain bridges and mixers; Chainalysis and exchanges warn of evolving tactics (hiring attackers, NPM package poisoning, AI-enabled impersonation) and call for DPRK-specific laundering detection.
AI Analysis
Chainalysis reports $2.02B stolen in 2025 (51% rise) and says DPRK-linked actors account for 59% of $3.4B total thefts; attacks are fewer but cause much larger losses (notably the FBI-linked $1.5B Bybit attack). The report documents a distinct three-wave, 45-day laundering pattern using Chinese-language services, cross-chain bridges and mixers, and warns of new tactics (hiring attackers, NPM package poisoning, AI-enabled impersonation), supporting a negative outlook and meaningful market impact.
Expected Investor Sentiment: Bearish
Potential Market Impact: Significant
