North Korean Hackers' Crypto Theft: Uncovering $600 Million in 2023

Last month, U.S., South Korean, and Japanese officials met to discuss North Korea’s cryptocurrency thefts in the context of its nuclear and ballistic missile programs.

The White House elaborated that National Security Advisors reviewed ongoing trilateral initiatives, including consultations on regional crises, sharing ballistic missile defense data, and countering DPRK’s use of cryptocurrency for its unlawful weapons programs.

In 2022, North Korean hackers used counterfeit Coinbase job offers to target cryptocurrency experts as part of their broader cybercrime strategy.

Moreover, Tornado Cash founders faced indictments last year for laundering over $1 billion, including funds for the Lazarus Group, a North Korean state-backed hacking group under sanctions.

U.S. Attorney General Merrick B. Garland highlighted the intent of the scheme to facilitate criminals in laundering and concealing funds using cryptocurrency, including laundering hundreds of millions for the sanctioned North Korean cybercrime group. The United States Treasury Department imposed sanctions on individuals and hacking groups allegedly tied to North Korea, including Lazarus. Following sanctions against cryptocurrency mixers Tornado Cash and Sinbad, TRM Labs reported that the DPRK explored alternative laundering methods.

CertiK reported on January 3 that there were roughly 751 breaches in 2023, resulting in the loss of over $1.8 billion in crypto, one-third of which DPRK hackers were purportedly responsible for. The Ethereum network recorded the highest losses, amounting to $686 million across 224 incidents.

U.S. officials frequently cite digital assets as reasons for imposing sanctions on certain entities, such as the terrorist group Hamas after its October 7 attack on Israel. Cryptocurrency mixers have also been a focal point for lawmakers, who argue that the technology primarily serves illicit purposes.