{
	"id": "67a5a824-2a24-4645-8225-f67cb949836d",
	"created_at": "2026-04-06T00:21:06.683722Z",
	"updated_at": "2026-04-10T03:22:13.728587Z",
	"deleted_at": null,
	"sha1_hash": "039c64cd2cead1b022047d782290c03b3382801b",
	"title": "North Korean Hackers Stole $600 Million in Crypto in 2023 | TRM Blog",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 150411,
	"plain_text": "North Korean Hackers Stole $600 Million in Crypto in 2023 | TRM\r\nBlog\r\nArchived: 2026-04-05 13:03:00 UTC\r\nNorth Korean Hackers Stole $600 Million in Crypto in 2023\r\nHackers tied to North Korea stole at least USD 600 million in cryptocurrency in 2023, according to new research\r\nby TRM Labs. Additional hacks carried out in the final days of last year could, if confirmed to have been\r\ncommitted by North Korea, push this total to around USD 700 million.\r\nThe Democratic People’s Republic of Korea (DPRK) was responsible for almost a third of all funds stolen in\r\ncrypto attacks last year, despite a 30% reduction from the USD 850 million haul in 2022. \r\nHacks perpetrated by the DPRK were on average ten times as damaging as those not linked to North Korea.\r\nNearly USD 3 billion worth of crypto has been lost to Pyongyang-linked threat actors since 2017.\r\nNorth Korea conducts nearly all of its attacks by compromising private keys and seed phrases, which are critical\r\nsecurity elements of digital wallets. Hackers transfer the victims’ digital assets to wallet addresses controlled by\r\nNorth Korean operatives. They are then swapped mostly for USDT or Tron and converted to hard currency using\r\nhigh-volume OTC brokers.\r\nThe DPRK’s money laundering methods constantly evolve to evade international law enforcement pressure. As\r\nUS sanctions and enforcement actions targeted Tornado Cash and ChipMixer – its previous go-to obfuscation\r\nplatforms – North Korea pivoted to another mixer it had already begun using, the BTC service Sinbad. After\r\nSinbad was sanctioned by OFAC in November 2023, North Korea continued exploring other laundering tools.\r\nhttps://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023\r\nPage 1 of 2\n\nWith nearly USD 1.5 billion stolen in the past two years alone, North Korea’s hacking prowess demands\r\ncontinuous vigilance and innovation from business and governments. Despite notable advancements in\r\ncybersecurity among exchanges and increased international collaboration in tracking and recovering stolen funds,\r\n2024 is likely to see further disruption from the world’s most prolific cyber-thief.\r\nThis is some text inside of a div block.\r\nSubscribe and stay up to date with our insights\r\nSource: https://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023\r\nhttps://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023"
	],
	"report_names": [
		"north-korean-hackers-stole-600-million-in-crypto-in-2023"
	],
	"threat_actors": [],
	"ts_created_at": 1775434866,
	"ts_updated_at": 1775791333,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/039c64cd2cead1b022047d782290c03b3382801b.pdf",
		"text": "https://archive.orkl.eu/039c64cd2cead1b022047d782290c03b3382801b.txt",
		"img": "https://archive.orkl.eu/039c64cd2cead1b022047d782290c03b3382801b.jpg"
	}
}