A new report from blockchain analytics firm TRM Labs has shed light on the staggering extent of cryptocurrency thefts by North Korean hackers over the past five years. Despite North Korea’s denial of involvement in hacking and cyberattacks, the report reveals that these state-affiliated hackers have stolen more than $2 billion in cryptocurrencies during this period.
The Extent of the Thefts
According to the report, 2023 alone has witnessed cryptocurrency heists amounting to an estimated $200 million. This figure accounts for 30 hacks so far this year, which is fewer compared to the previous year but still stands out as ten times larger than attacks carried out by other actors. These numbers underscore the prolific and persistent nature of North Korean cybercriminal operations.
Denial and Previous Allegations
Unsurprisingly, North Korea has refuted claims of hacking and other cyberattacks in the past. However, a United Nations report indicates that attackers based in North Korea commandeered more cryptocurrency assets in 2022 than in any other year. Their targets included the networks of foreign aerospace and defense companies, further substantiating their involvement in cybercrime.
Targeting the DeFi Ecosystem
In recent years, North Korean hackers have shifted their focus primarily towards the decentralized finance (DeFi) ecosystem. This strategic shift highlights their recognition of the potential for lucrative gains within this nascent sector of the cryptocurrency industry. By targeting the DeFi ecosystem, North Korean hackers exploit vulnerabilities and weaknesses, seeking opportunities for substantial financial theft.
Record-Breaking Year for Hacks in 2023
Last year witnessed unprecedented numbers in cryptocurrency thefts, with a staggering $4 billion stolen. A significant portion of this amount can be attributed to North Korean state-affiliated hacking groups. One standout example of their audacious actions involved the hack on Atomic Wallet, a non-custodial wallet provider.
Details of the Atomic Wallet Hack
The Atomic Wallet hack resulted in the theft of approximately $100 million worth of cryptocurrency. The hackers drained assets from victim wallets across multiple blockchains, including Ethereum, Tron, Bitcoin, Ripple, Dogecoin, Stellar, and Litecoin. This wide range of targeted cryptocurrencies underlines the hackers’ versatility and adaptability to the evolving crypto landscape.
Laundering Techniques Used by the Hackers
To cover their tracks, anonymous North Korean hackers operating from undisclosed locations employ a series of complex laundering techniques. After draining funds from wallets, they promptly transfer them to centralized exchanges before commencing the money laundering process. By leveraging a variety of intricate techniques, they obscure the origin and flow of the stolen funds, making it increasingly challenging for authorities to track their activities.
The TRM Labs report emphasizes the significant impact of North Korean hackers on the cryptocurrency space, with more than $2 billion stolen in the last five years. As their focus shifts towards the DeFi ecosystem, it becomes crucial for the industry to bolster cybersecurity measures and enhance vigilance against such attacks. Only through collaborative efforts can the industry mitigate the risks posed by these persistent cybercriminals and safeguard the integrity and trust in cryptocurrencies.