North Korea Attacking The Crypto Ecosystem

North Korea Attacking The Crypto Ecosystem

How North Korea Steals Cryptocurrency

Global Cybercrime – A SCARS Special Report

North Korea Has Been Attacking The Crypto Ecosystem At Alarming Speed And Scale

According to TRM Labs, and others – last year North Korea succeeded in stealing over a billion dollars from crypto services.

How Does North Korea (DPRK) Execute This? What Are The Geopolitical Ramifications?

What are the key aspects of North Korea’s crypto program?

  • Financial Gain: One primary objective of North Korea’s crypto hacking operations is financial gain and an attempt to bypass sanctions to fund weapons proliferation.
  • Advanced Cyber Tools: North Korea employs advanced cyber tools and techniques to carry out its crypto hacking operations. This includes spear-phishing campaigns, where carefully crafted emails are sent to targets to trick them into revealing sensitive information or executing malicious code. Additionally, the use of sophisticated malware, including remote access trojans (RATs) and cryptocurrency-stealing malware, helps facilitate unauthorized access and funds theft.
  • Targeting Crypto Services: North Korea primarily targets cryptocurrency exchanges and the DeFi ecosystem which serve as lucrative targets due to their holdings of substantial amounts of digital assets. By infiltrating these services, hackers can directly steal cryptocurrencies or conduct attacks that compromise the integrity of the platform, resulting in widespread financial losses.
  • Exploiting Weak Security Practices: North Korean hackers exploit security weaknesses within services, leveraging vulnerabilities in software, networks, or human factors. They carefully research and identify vulnerabilities and use them as entry points to gain unauthorized access to systems and carry out their attacks.
  • Money Laundering: Once cryptocurrencies are stolen, North Korean hackers employ sophisticated money laundering techniques to obfuscate the origins of the funds. They may utilize mixers or tumblers to blend the stolen coins with legitimate transactions, making it challenging to trace the illicit activities. Funds may also be rerouted through multiple wallets and exchanges to further complicate the tracking process.
  • Support from State Actors: It is widely believed that North Korean hacking groups operate with the support and protection of the state. They may receive guidance, resources, and safe havens, which enable them to carry out their operations with relative impunity.
  • Proxy Networks: North Korean hackers often utilize proxy networks and compromised infrastructure from various countries to mask their identities and location. By routing their activities through these intermediaries, they create further challenges for attribution and investigation.

North Korea Is Engaged!

North Korea is engaged in a wide range of cryptocurrency crimes, including:

  • Cryptocurrency theft: North Korea has been accused of stealing billions of dollars worth of cryptocurrency through hacking attacks. In 2021, the US Treasury Department attributed a $620 million hack of the Ronin Network to North Korea.
  • Cryptocurrency laundering: North Korea uses cryptocurrency to launder money that it has obtained through other criminal activities, such as drug trafficking and counterfeiting.
  • Cryptocurrency ransomware: North Korea has also been accused of using cryptocurrency to extort money from businesses and individuals. In 2021, the US Cybersecurity and Infrastructure Security Agency (CISA) warned that North Korea was using a ransomware called Maui to target businesses in the healthcare and telecommunications sectors.

North Korea’s use of cryptocurrency is a major challenge for the global financial system. Cryptocurrency is a borderless asset that can be easily moved around the world, sometimes making it difficult to track and trace. This makes it an attractive option for criminal nations like North Korea, who are looking to move money around without detection to fund their nation’s activities.

The international community is working to address the challenge of North Korea’s cryptocurrency crimes. In 2021, the Financial Action Task Force (FATF), an international body that sets standards for combating money laundering and terrorist financing, updated its guidance on virtual assets and VASPs (virtual asset service providers). The updated guidance includes specific measures that VASPs should take to prevent North Korea from using cryptocurrency to finance its illicit activities.

The FATF’s guidance is a positive step, but as it is an NGO it is important to note that it is not legally binding. This means that it is up to individual countries to implement the guidance into their own laws and regulations. As a result, it is likely that North Korea will continue to use cryptocurrency to finance its illicit activities for the foreseeable future.

Here are some of the things that can be done to combat North Korea’s cryptocurrency crimes:

  • Increased international cooperation: The international community needs to work together to share information and resources to combat North Korea’s cryptocurrency crimes.
  • Improved regulation of cryptocurrency exchanges and VASPs: Cryptocurrency exchanges and VASPs need to be regulated to ensure that they are not being used to facilitate North Korea’s illicit activities.
  • Public awareness: The public needs to be made aware of the risks of cryptocurrency crimes and how to protect themselves.

How Does North Korea Use The Proceeds Of Its Efforts To Steal Cryptocurrency Worldwide?

North Korea, specifically its government agencies and affiliated hacking groups, has been accused of engaging in various cyberattacks and hacking campaigns targeting cryptocurrency exchanges, financial institutions, and individuals to steal cryptocurrencies. The stolen funds are believed to be used by North Korea for several purposes:

  • Evasion of sanctions: North Korea is subject to extensive international sanctions due to its nuclear weapons and missile programs. By acquiring and utilizing cryptocurrencies, North Korea can potentially evade some of these sanctions by bypassing the traditional banking system and conducting transactions with greater anonymity.
  • Financing weapons programs: It is suspected that some of the proceeds from cryptocurrency thefts are used to finance North Korea’s weapons development programs. This includes funding its nuclear and ballistic missile programs, which have been a significant concern for the international community.
  • Supporting the regime: The funds acquired through cryptocurrency thefts may also be used to support the North Korean regime and its leadership. This can include funding government operations, maintaining the lifestyle of top officials, and investing in infrastructure projects that help consolidate the regime’s power.
  • Money laundering and illicit activities: Cryptocurrencies provide a degree of anonymity, making them attractive for money laundering purposes. It is believed that North Korea may use stolen cryptocurrencies as a means to launder money and finance other illicit activities, such as smuggling, drug trafficking, and cybercrime. This also includes supporting its other cybercrime activities, including relationship scams.

It’s important to note that the precise details of how North Korea uses the proceeds of cryptocurrency thefts are challenging to ascertain due to the secretive nature of the country’s leadership and limited access to reliable information. The mentioned purposes are based on assessments made by cybersecurity experts and intelligence agencies.

What Agencies Of North Korea Are Involved?

The United Nations has accused North Korea of using government agencies, including the Reconnaissance General Bureau (RGB) and the Ministry of State Security (MSS), to steal cryptocurrency worldwide. The RGB is North Korea’s primary intelligence agency, while the MSS is responsible for domestic security.

In 2021, the United States Treasury Department imposed sanctions on a North Korean cryptocurrency exchange called “Hermit Kingdom”. The Treasury Department alleged that Hermit Kingdom was used to launder stolen cryptocurrency and finance the country’s nuclear weapons program.

The United States Department of Justice has also accused North Korea of stealing cryptocurrency from a number of companies and organizations. In 2022, the DOJ announced that it had seized $3.6 billion worth of cryptocurrency that was stolen from North Korea in a series of cyberattacks.

The use of cryptocurrency by North Korea is a growing problem. As the value of cryptocurrency continues to rise, so too does the incentive for criminals to steal it. North Korea is well-positioned to take advantage of this trend, as it has a sophisticated cyberwarfare capability and a lack of international financial oversight.

The international community is taking steps to address the problem of North Korea’s use of stolen cryptocurrency. In 2022, the United States Treasury Department issued guidance to financial institutions on how to identify and report suspicious cryptocurrency transactions. The United Nations Security Council is also considering new sanctions on North Korea that would target its use of cryptocurrency.

Despite these efforts, it is likely that North Korea will continue to use stolen cryptocurrency to fund its nuclear weapons program and other illicit activities. The country has a long history of evading sanctions, and it is likely to find new ways to use cryptocurrency to do so.

Here are some of the cyberattacks that have been attributed to North Korea:

  • In 2017, North Korea was accused of stealing $81 million worth of cryptocurrency from the Ethereum blockchain. In 2017, the blockchain analytics company Chainalysis identified a group of hackers known as Lazarus as the perpetrators of the Ethereum theft. Lazarus is a North Korean hacking group that has been accused of carrying out a number of cyberattacks, including the WannaCry ransomware attack in 2017.
  • In 2018, North Korea was accused of stealing $1.2 billion worth of cryptocurrency from the Binance exchange. In 2018, the blockchain analytics company CipherTrace identified North Korea as the likely perpetrator of the Binance theft. CipherTrace found that the hackers used a technique called “transaction mixing” to obscure the trail of their stolen funds. Transaction mixing is a process where cryptocurrency is sent through a number of different wallets in order to make it difficult to track.
  • In 2019, North Korea was accused of stealing $400 million worth of cryptocurrency from a number of companies and organizations.  According to a report by the blockchain analytics firm Chainalysis, North Korea stole an estimated $400 million worth of cryptocurrency in 2019.
  • In 2020, North Korea was accused of stealing $2.3 billion worth of cryptocurrency from a number of companies and organizations. In 2020, the blockchain analytics company Elliptic identified North Korea as the likely perpetrator of a series of cyberattacks that resulted in the theft of $2.3 billion worth of cryptocurrency. Elliptic found that the hackers used a variety of techniques, including transaction mixing and social engineering, to steal the cryptocurrency.

The United States government has accused North Korea of using the stolen cryptocurrency to fund its nuclear weapons program. The United Nations Security Council has imposed sanctions on North Korea in an effort to prevent the country from developing nuclear weapons. However, North Korea has continued to develop its nuclear weapons program, and it is likely to continue to use stolen cryptocurrency to fund this program.

Tracing And Recovering Cryptocurrency Stolen By North Korea

It is possible to trace and recover cryptocurrency stolen by North Korea, but it is not always easy. Cryptocurrency transactions are recorded on a public ledger called the blockchain, which makes it possible to track the movement of funds. However, North Korean hackers are often very sophisticated and use techniques such as mixing and tumbling to obscure the trail of their stolen funds.

In some cases, law enforcement agencies have been able to trace and recover cryptocurrency stolen by North Korea. For example, in 2022, the United States Department of Justice announced that it had seized $3.6 billion worth of cryptocurrency that was stolen from North Korea in a series of cyberattacks.

However, in other cases, it has been more difficult to trace and recover cryptocurrency stolen by North Korea. For example, in 2017, North Korean hackers stole $81 million worth of cryptocurrency from the Ethereum blockchain. The hackers used a technique called “transaction mixing” to obscure the trail of their stolen funds, making it difficult for law enforcement to track them down.

The difficulty of tracing and recovering cryptocurrency stolen by North Korea is a major challenge for law enforcement agencies. However, there are a number of tools and techniques that can be used to make it more difficult for North Korean hackers to steal and launder cryptocurrency. These tools and techniques include:

  • Blockchain analytics: Blockchain analytics companies (such as BIG, TRM, and Chainalysis) use sophisticated software to analyze blockchain data and identify suspicious transactions. This data can then be used to track down and recover cryptocurrency stolen by North Korea (or any other criminal.)
  • International cooperation: Law enforcement agencies from different countries can work together to share information and track down cryptocurrency stolen by North Korea. This cooperation is essential, as North Korean hackers often operate across borders.
  • Cryptocurrency regulations: Governments can regulate cryptocurrency exchanges and other businesses that deal in cryptocurrency. This regulation can make it more difficult for North Korean hackers to launder stolen cryptocurrency.

The challenge of tracing and recovering cryptocurrency stolen by North Korea is a complex one. However, the tools and techniques available to law enforcement agencies are constantly evolving. As these tools and techniques improve, it will become more difficult for North Korean hackers to steal and launder cryptocurrency.

-/ 30 /-

What do you think about this?
Please share your thoughts in a comment below!

SCARS FREE Support & Recovery Program - 4 EVER FREE

Do You Need Support?
Get It Now!

SCARS provides the leading Support & Recovery program for relationship scam victims – completely FREE!

Our managed peer support groups allow victims to talk to other survivors and recover in the most experienced environment possible, for as long as they need. Recovery takes as long as it takes – we put no limits on our support!

SCARS is the most trusted support & education provider in the world. Our team is certified in trauma-informed care, grief counseling, and so much more!

To apply to join our groups visit

We also offer separate support groups for family & friends too.

SCARS STAR Membership

Become a

SCARS offers memberships in our STAR program, which includes many benefits for a very low annual membership fee!

SCARS STAR Membership benefits include:

  • FREE Counseling or Therapy Benefit from our partner
  • Exclusive members-only content & publications
  • Discounts on SCARS Self-Help Books Save
  • And more!

To learn more about the SCARS STAR Membership visit

To become a SCARS STAR Member right now visit


SCARS Publishing Self-Help Recovery Books Available At

Scam Victim Self-Help Do-It-Yourself Recovery Books

SCARS Printed Books For Every Scam Survivor From SCARS Publishing


Each is based on our SCARS Team’s 32-plus years of experience.

SCARS Website Visitors receive an Extra 10% Discount
Use Discount Code “romanacescamsnow” at Checkout

Always Report All Scams – Anywhere In The World To:

Go to to learn how

U.S. FTC at and SCARS at
Visit to learn more!



Legal Disclaimer:

The content provided on this platform regarding psychological topics is intended solely for educational and entertainment purposes. The publisher makes no representations or warranties regarding the accuracy or completeness of the information presented. The content is designed to raise awareness about various psychological subjects, and readers are strongly encouraged to conduct their own research and verify information independently.

The information presented does not constitute professional advice, diagnosis, or treatment of any psychological disorder or disease. It is not a substitute for professional medical or mental health advice, diagnosis, or treatment. Readers are advised to seek the guidance of a licensed medical professional for any questions or concerns related to their mental health.

The publisher disclaims any responsibility for actions taken or not taken based on the content provided. The treatment of psychological issues is a serious matter, and readers should consult with qualified professionals to address their specific circumstances. The content on this platform is not intended to create, and receipt of it does not constitute, a therapist-client relationship.

Interpretation and Definitions


For the purposes of this Disclaimer:

  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Disclaimer) refers to Society of Citizens Against Relationship Scams Inc. (registered d.b.a. “SCARS”,) 9561 Fountainbleau Blvd., Suit 602, Miami FL 33172.
  • Service refers to the Website.
  • You means the individual accessing this website, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
  • Website refers to, accessible from

Website Disclaimer

The information contained on this website is for general information purposes only.

The Company assumes no responsibility for errors or omissions in the contents of the Service.

In no event shall the Company be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence or other tort, arising out of or in connection with the use of the Service or the contents of the Service. The Company reserves the right to make additions, deletions, or modifications to the contents on the Service at any time without prior notice.

The Company does not warrant this website in any way.

External Links Disclaimer

This website may contain links to external websites that are not provided or maintained by or in any way affiliated with the Company.

Please note that the Company does not guarantee the accuracy, relevance, timeliness, or completeness of any information on these external websites.

Errors and Omissions Disclaimer

The information given by SCARS is for general guidance on matters of interest only. Even if the Company takes every precaution to ensure that the content of this website is both current and accurate, errors can occur. Plus, given the changing nature of laws, rules, and regulations, there may be delays, omissions, or inaccuracies in the information contained on this website.

SCARS is not responsible for any errors or omissions, or for the results obtained from the use of this information.

Fair Use Disclaimer

SCARS may use copyrighted material that has not always been specifically authorized by the copyright owner. The Company is making such material available for criticism, comment, news reporting, teaching, scholarship, or research.

The Company believes this constitutes a “fair use” of any such copyrighted material as provided for in section 107 of the United States Copyright law.

If You wish to use copyrighted material from this website for your own purposes that go beyond fair use, You must obtain permission from the copyright owner.

Views Expressed Disclaimer

The Service may contain views and opinions which are those of the authors and do not necessarily reflect the official policy or position of any other author, agency, organization, employer, or company, including SCARS.

Comments published by users are their sole responsibility and the users will take full responsibility, liability, and blame for any libel or litigation that results from something written in or as a direct result of something written in a comment. The Company is not liable for any comment published by users and reserves the right to delete any comment for any reason whatsoever.

No Responsibility Disclaimer

The information on the Service is provided with the understanding that the Company is not herein engaged in rendering legal, accounting, tax, medical or mental health, or other professional advice and services. As such, it should not be used as a substitute for consultation with professional accounting, tax, legal, medical or mental health, or other competent advisers.

In no event shall the Company, its team, board of directors, volunteers, or its suppliers be liable for any special, incidental, indirect, or consequential damages whatsoever arising out of or in connection with your access or use or inability to access or use the Service.

“Use at Your Own Risk” Disclaimer

All information on this website is provided “as is”, with no guarantee of completeness, accuracy, timeliness or of the results obtained from the use of this information, and without warranty of any kind, express or implied, including, but not limited to warranties of performance, merchantability, and fitness for a particular purpose.

SCARS will not be liable to You or anyone else for any decision made or action taken in reliance on the information given by the Service or for any consequential, special, or similar damages, even if advised of the possibility of such damages.

Contact Us

If you have any questions about this Disclaimer, You can contact Us:

  • By email:

PLEASE NOTE: Psychology Clarification

The following specific modalities within the practice of psychology are restricted to psychologists appropriately trained in the use of such modalities:

  • Diagnosis: The diagnosis of mental, emotional, or brain disorders and related behaviors.
  • Psychoanalysis: Psychoanalysis is a type of therapy that focuses on helping individuals to understand and resolve unconscious conflicts.
  • Hypnosis: Hypnosis is a state of trance in which individuals are more susceptible to suggestion. It can be used to treat a variety of conditions, including anxiety, depression, and pain.
  • Biofeedback: Biofeedback is a type of therapy that teaches individuals to control their bodily functions, such as heart rate and blood pressure. It can be used to treat a variety of conditions, including stress, anxiety, and pain.
  • Behavioral analysis: Behavioral analysis is a type of therapy that focuses on changing individuals’ behaviors. It is often used to treat conditions such as autism and ADHD.
    Neuropsychology: Neuropsychology is a type of psychology that focuses on the relationship between the brain and behavior. It is often used to assess and treat cognitive impairments caused by brain injuries or diseases.

SCARS and the members of the SCARS Team do not engage in any of the above modalities in relationship to scam victims. SCARS is not a mental healthcare provider and recognizes the importance of professionalism and separation between its work and that of the licensed practice of psychology.

SCARS is an educational provider of generalized self-help information that individuals can use for their own benefit to achieve their own goals related to emotional trauma. SCARS recommends that all scam victims see professional counselors or therapists to help them determine the suitability of any specific information or practices that may help them.

SCARS cannot diagnose or treat any individuals, nor can it state the effectiveness of any educational information that it may provide, regardless of its experience in interacting with traumatized scam victims over time. All information that SCARS provides is purely for general educational purposes to help scam victims become aware of and better understand the topics and to be able to dialog with their counselors or therapists.

It is important that all readers understand these distinctions and that they apply the information that SCARS may publish at their own risk, and should do so only after consulting a licensed psychologist or mental healthcare provider.






This content and other material contained on the website, apps, newsletter, and products (“Content”), is general in nature and for informational purposes only and does not constitute medical, legal, or financial advice; the Content is not intended to be a substitute for licensed or regulated professional advice. Always consult your doctor or other qualified healthcare provider, lawyer, financial, or tax professional with any questions you may have regarding the educational information contained herein. SCARS makes no guarantees about the efficacy of information described on or in SCARS’ Content. The information contained is subject to change and is not intended to cover all possible situations or effects. SCARS does not recommend or endorse any specific professional or care provider, product, service, or other information that may be mentioned in SCARS’ websites, apps, and Content unless explicitly identified as such.

The disclaimers herein are provided on this page for ease of reference. These disclaimers supplement and are a part of SCARS’ website’s Terms of Use. 

All original content is Copyright © 1991 – 2023 Society of Citizens Against Relationship Scams Inc. (Registered D.B.A SCARS) All Rights Reserved Worldwide & Webwide. Third-party copyrights acknowledge.

U.S. State of Florida Registration Nonprofit (Not for Profit) #N20000011978 [SCARS DBA Registered #G20000137918] – Learn more at

View the claimed and or registered indicia, service marks, and trademarks of Society of Citizens Against Relationship Scams Inc., All Rights Reserved Worldwide

Contact the law firm for the Society of Citizens Against Relationship Scams Incorporated by email at

Share This Information - Choose Your Social Media!

Leave A Comment