TLDR: North Korea’s share of stolen crypto rose from 7% in 2020 to 85% so far in 2026, per TRM Labs. Its hackers have stolen $12.8 billion in crypto since 2017, according to TRM Labs data. At
North Korea crypto hacks now account for more than three of every four dollars stolen in crypto this year. Data shows the country’s share of stolen funds reached 85% so far in 2026, up from 7% in 2020.
TRM Labs reports that its hackers have taken $12.8 billion in crypto since 2017. Eleven governments say the money supports the country’s weapons programs, while the FBI continues to link its units to major thefts.
TRM Labs data shows how North Korea crypto hacks have grown over time. The country held 7% of stolen crypto in 2020. In 2021, its share was under 10%. It then reached 22% in 2022 and 37% in 2023. The share has risen every year in the series.
The figure rose to 39% in 2024 and 63% in 2025. So far in 2026, it stands at 85%. The year is not over, so the 2026 share may change. In total, its hackers have stolen $12.8 billion in crypto since 2017, according to TRM Labs.
North Korea is now blamed for more than 3 of EVERY 4 dollars hacked in crypto.
Here's its share of all crypto stolen in hacks each year:
2020: 7%2021: under 10%2022: 22%2023: 37%2024: 39%2025: 63%2026: 85% (so far)
In total, its hackers have stolen $12.8 BILLION in… https://t.co/ktfGGjNOcH
— Coin Bureau (@coinbureau) October 31, 2026
Governments also reported on the 2025 thefts. Eleven governments said its hackers stole at least $1.65 billion in just nine months of that year.
That amount is 3.5 times what North Korea earned from all legal exports that year. The comparison comes from the same group of governments.
Those governments say the money funds North Korea’s weapons programs. The FBI also blamed the country for the $1.5 billion Bybit hack, which took place in February 2025. Separately, the US Treasury says the hackers work in units run by the country’s main spy agency.
Several named units carry out these attacks. The FBI tied the Lazarus Group to the $620 million Ronin hack in 2022. It also uses the name TraderTraitor for the hackers behind the Bybit, DMM Bitcoin and Binance thefts.
A third group, Andariel, faces separate allegations. One alleged member has a $10 million US bounty over ransomware attacks on hospitals.
The bounty relates to ransomware, not to crypto theft. Governments say such attacks hit US hospitals, and one Kansas medical center paid about $100,000.
North Korea’s hacking activity is not limited to crypto. Governments have blamed North Korea for the 2014 Sony Pictures attack, which knocked out thousands of computers. They also cite the 2016 theft of $81 million from Bangladesh’s central bank.
The WannaCry attack hit about 300,000 computers in 150 countries, including Britain’s NHS. A 2024 US indictment said hackers breached NASA and two US Air Force bases.
These cases involve government networks as well as private companies. Authorities have continued to issue sanctions and indictments against the country’s hackers. Even so, North Korea crypto hacks have not slowed.
The post North Korea Now Blamed for 85% of Crypto Stolen in Hacks This Year appeared first on Blockonomi.
