North Korea-Linked Crypto Hacking Hits Record High in 2023, Stolen Funds Exceed $1 Billion

Chainalysis reports a record number of crypto platform attacks by North Korea-linked hackers in 2023, stealing over $1 billion in crypto assets. The blockchain analytics firm notes a rise in hacking incidents in recent years, with groups like Kimsuky and Lazarus Group employing various tactics for large-scale asset acquisition.

Advertisement

  • Record Crypto Platform Attacks:
    • Chainalysis Report: North Korea-linked hackers targeted 20 crypto platforms in 2023, marking the highest number recorded between 2016 and 2023.
    • Increase in Hacking Incidents: The report highlights a surge in cyber-espionage activities by groups like Kimsuky and Lazarus Group, utilizing diverse malicious tactics to amass significant amounts of crypto assets.
  • Stolen Crypto Funds in 2023:
    • Total Stolen Funds: North Korea-affiliated hackers stole slightly over $1 billion worth of crypto assets in 2023.
    • Comparison with 2022: While the 2023 figure was lower, the report notes that North Korea-affiliated hackers had set a record by stealing $1.7 billion in crypto assets in 2022.
  • Hacking Groups and Tactics:
    • Kimsuky and Lazarus Group: These cyber-espionage groups, among others, have been associated with North Korea’s hacking activities, employing various tactics for unauthorized access and theft.
  • Specific Incidents and Sanctions:
    • Stake.com Hack: The FBI confirmed that North Korea’s Lazarus Group was responsible for stealing about $41 million in crypto assets from Stake.com in September.
    • Sanctions on Sinbad.io: The U.S. Department of the Treasury’s Office of Foreign Assets Control sanctioned Sinbad.io, a virtual currency mixer, for aiding Lazarus Group in laundering millions of dollars in crypto stolen from various hacks.
  • Motivation for Funding Programs:
    • Regime’s Financial Support: Previous research has indicated that North Korea-affiliated hackers stole hundreds of millions in crypto assets to fund the regime’s nuclear weapons programs.
  • Global Response and Future Outlook:
    • International Collaboration: Despite advancements in cybersecurity among exchanges and increased global collaboration, the report suggests that 2024 is likely to see continued disruption from North Korea’s prolific cyber-thievery.

North Korea’s cyber activities, particularly in the realm of crypto hacking, have reached new heights, with a record number of platform attacks in 2023. The significant sums stolen underscore the challenges faced by the cryptocurrency industry in securing digital assets against sophisticated state-sponsored hacking groups. As international efforts continue to combat such activities, vigilance and innovation in cybersecurity remain critical to thwarting ongoing threats.