In a massive escalation of cybercrime, North Korean state-sponsored hackers have stolen over $2 billion in cryptocurrency in 2025 alone, according to recent FBI reports and analyses from leading blockchain firms. This year’s haul is staggering, highlighted by a single, record-breaking theft of $1.5 billion from the Bybit exchange.
The primary group behind these attacks is the notorious Lazarus Group, which is widely known to be controlled by the North Korean regime. These cyberattacks are not random crimes but a coordinated national strategy to fund the country’s controversial military programs.
Athar Sultan Joins ARY Group as Senior Vice President of Technology
Billions Stolen to Fund Nuclear Ambitions
Cumulative data from firms like Elliptic and Chainalysis shows that since 2017, these hacking groups have stolen a total of over $6 billion in digital assets.
U.S. authorities have consistently emphasized that the stolen funds are directly funneled to finance North Korea’s nuclear weapons and ballistic missile programs. This method provides the heavily sanctioned country with a significant source of hard currency that is difficult to trace and seize.
An Ongoing Global Threat
The scale and success of these attacks underscore a persistent and severe threat to the global digital financial system. Despite increased security measures by exchanges and international crackdowns, state-sponsored groups like Lazarus continue to adapt and execute sophisticated heists, posing a major challenge to global security.
Frequently Asked Questions (FAQs)
1. Who is the Lazarus Group?
The Lazarus Group is a cybercrime hacking group that is widely believed to be sponsored by the North Korean government. They are known for large-scale cryptocurrency theft and other cyberattacks.
2. How much was stolen in the biggest single heist of 2025?
The largest single theft in 2025 was $1.5 billion, stolen from the cryptocurrency exchange Bybit.
3. What does North Korea do with the stolen money?
U.S. and international authorities confirm that the stolen funds are used to finance North Korea’s nuclear weapons development and its military programs, bypassing international sanctions.
4. Why is cryptocurrency a target?
Cryptocurrency is a prime target because it can be transferred across borders quickly and, while transactions are recorded on a public ledger, it can be difficult to trace and recover once stolen by sophisticated hackers.
