CMB Stock News Of The Day 📰🗞️🗞️📈📉

“North Korea’s Multi-Billion Dollar Crypto Hacking Empire Continues to Expand” 🚨🚨🚨

Cyber theft has evolved into one of North Korea’s most powerful financial weapons, with new research showing the regime has stolen an estimated $6.75 billion in cryptocurrency between 2016 and early 2026.

According to blockchain security firm CertiK, threat actors linked to the Democratic People’s Republic of Korea (DPRK) were connected to 263 documented crypto exploits over the last decade. Analysts warn the real number is likely far higher, as countless attacks targeting individuals, startups, and smaller decentralized finance projects often go unreported.

Unlike traditional hackers focused on exploiting coding flaws, North Korean cyber groups have increasingly specialized in manipulating human behavior. CertiK’s report emphasized that DPRK-linked actors rarely rely solely on smart contract vulnerabilities. Instead, they spend months building trust with employees, developers, and executives before launching attacks.

One of the most alarming examples involved the $270 million exploit against Solana-based protocol Solana ecosystem project Drift. Investigators say the operation took over six months to orchestrate, with North Korean operatives attending multiple crypto conferences around the world while posing as representatives of a legitimate quantitative trading firm.

The attackers reportedly built relationships with contributors and insiders long before funds were stolen.

The strategy mirrors the infamous 2022 Ronin Network attack, where hackers drained roughly $625 million from the blockchain tied to Axie Infinity. In that case, a DPRK operative allegedly posed as a recruiter on LinkedIn and sent a fake job offer to an employee at Sky Mavis. The attached PDF contained spyware that ultimately gave hackers access to critical internal systems.

Security researchers now believe these operations are not isolated criminal activities, but coordinated state-backed missions designed to generate revenue for the North Korean regime. CertiK described the actors as “state employees executing a strategic mandate,” noting that their patience, funding, and sophistication far exceed what most cybercriminal organizations can sustain.

Experts say the stolen cryptocurrency has become a critical economic lifeline for North Korea, helping the heavily sanctioned country fund weapons programs, military development, and government operations. Because blockchain transactions can move across borders rapidly and often anonymously, digital assets have created a new avenue for sanctions evasion and illicit financing.

The broader decentralized finance industry continues to struggle with security concerns. Last month alone, the DeFi ecosystem suffered 28 separate hacks — the highest monthly exploit count on record — totaling more than $635 million in losses. One of the largest attacks targeted Ethereum-native protocol KelpDAO within the Ethereum ecosystem.

As the crypto market expands globally, cybersecurity experts warn that DPRK-linked groups are likely to become even more aggressive, sophisticated, and difficult to detect. Until stronger international enforcement and security standards are implemented, many analysts believe cryptocurrency theft will remain one of North Korea’s most effective and profitable tools on the global stage.