North Korea’s hackers has reportedly stolen nearly $2 billion from centralized crypto exchanges over the past year.
Blockchain security researcher Tay Monahan attributes a significant portion of those funds, around $1.8 billion, to a series of major hacks targeting centralized crypto trading platforms like Bybit, DMM Bitcoin, WazirX, Phemex, and BingX.
Despite setbacks such as asset freezes and transaction fees, the group is believed to have successfully laundered more than $1.5 billion for the North Korean regime.
She said:
“Even if we optimistically say they lost 15% to freezes and fees and brokers that’s still over $1.5 billion dollars to the authoritarian regime of a nation with a total GDP <$30 billion.”
A recent investigation by TRM Labs found that the hackers relied on underground Chinese banking networks to move funds across borders. These informal channels helped them evade global sanctions and reduce the risk of detection.
To obscure their tracks, the hackers reportedly moved the stolen assets through a complex chain of transactions, often using decentralized exchanges, blockchain bridges, and crypto mixers.
The final phase typically involves offloading assets through over-the-counter (OTC) brokers, enabling the regime to extract fiat currency with minimal scrutiny.
Rising crypto crimes
Blockchain investigator ZachXBT has described this surge in coordinated thefts as part of a broader “crime supercycle” within the digital asset industry.
According to him:
“While it’s true the industry has historically been ripe for abuse it has noticeably increased since politicians launched meme coins and numerous court cases were dropped further enabling the behavior.”
While blockchain networks offer transparency, ZachXBT noted that the lack of consistent enforcement enables hackers to thrive.
He warned that laundering networks and OTC brokers have become increasingly effective at cleaning stolen funds, especially from recent exchange hacks.
Citing the growth of illicit activity on the Tron blockchain, he estimated that the “Black U” market may be worth as much as $10 billion.
ZachXBT also criticized the lack of regulatory enforcement, pointing out that many influencers promoting fraudulent projects rarely face consequences.
According to him, this further fuels a culture of impunity as the regulators focus their energy on decentralized developers and open-source projects rather than those violating the laws.
He said:
“Government agencies could probably have made $50-100M issuing fines to all of the influencers / projects who never disclosed paid ads over the years (is illegal in many jurisdictions but just never prosecuted).”
