North Korean hackers account for over 60% of all global cryptocurrency stolen in 2024

Amount stolen adds up to roughly £1bn in crypto, researchers say

Shweta Sharma
Friday 20 December 2024 06:55 EST
Comments
Related How bitcoin is fuelling climate change

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

North Korean hackers have stolen $1.34bn (£1bn) in cryptocurrency in 2024, accounting for nearly 60 per cent of the total amount stolen across the world, according to a new study.

A total of $2.2bn (£1.76bn) has been stolen from crypto platforms this year, marking a rise of 21 per cent, with crypto hacks by North Korean affiliates “becoming more frequent”, a study by blockchain analysis company Chainalysis said.

The amount stolen by North Korea-affiliated saw a 102 per cent increase in value from 2023, when an estimated $660.50m was stolen.

Isolated in the global market and reeling under international sanctions, the government in North Korea is accused of turning to crypto theft to fund state-sponsored operations and support its booming nuclear arsenal.

The report said that the US and international experts have assessed that Pyongyang uses the stolen crypto money to “finance its weapons of mass destruction and ballistic missiles programs”.

“Hackers linked to North Korea have become notorious for their sophisticated and relentless tradecraft, often employing advanced malware, social engineering, and cryptocurrency theft to fund state-sponsored operations and circumvent international sanctions,” the report said.

North Korean leader Kim Jong Un (C) overseeing a simulated nuclear counterattack drill earlier this year
North Korean leader Kim Jong Un (C) overseeing a simulated nuclear counterattack drill earlier this year (EPA)

Some of these attacks appeared to be linked to North Korean IT workers who have been able to infiltrate crypto and other technology firms, the report added.

“These workers often use sophisticated Tactics, Techniques, and Procedures (TTPs), such as false identities, third-party hiring intermediaries, and manipulating remote work opportunities to gain access,” it said.

The research comes at a time when the value of bitcoin, the world’s biggest and best-known cryptocurrency, has rallied to record levels ahead of US president-elect Donald Trump‘s second administration. This week Mr Trump reiterated that he plans to create a US strategic reserve of bitcoin similar to its strategic oil reserve, stoking the enthusiasm of crypto bulls.

The US Department of Justice (DoJ) has launched a crackdown on North Korean hackers engaged in crypto theft in recent years. It indicted 14 North Korean nationals who obtained employment as remote IT workers at US companies and were accused of generating more than $88m by stealing proprietary information and extorting their employers.

In one of the most significant incidents of crypto theft, a North Korea-affiliated hack targeted the Japanese cryptocurrency exchange DMM Bitcoin. The attack led to the theft of around 4,502.9 Bitcoin, worth $305m at the time.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in