ETH: Ethereum Bears Brunt of North Korea Crypto Heists

Hackers stole $2.1 billion worth of cryptocurrency in the first half of this year, setting a record.

Hackers Selling EDR To Major Crypto Firms

Quick overview

  • Hackers stole a record $2.1 billion worth of cryptocurrency in the first half of 2025, with 70% of the thefts linked to North Korean-sponsored actors.
  • North Korean groups were responsible for $1.0 billion of the stolen funds, marking a 10% increase over the previous high in 2022.
  • The February hack of the exchange Bybit, traced to a compromised developer laptop, was the largest in industry history and significantly contributed to the total losses.
  • The report highlights the strategic use of cybercrime by nation-states, particularly North Korea, as a growing threat in the crypto space.

Live ETH/USD Chart

ETH/USD
0.0000
MARKETS TREND
TRADE ETH/USD

Hackers stole $2.1 billion worth of cryptocurrency in the first half of this year, setting a record. A report released Friday by blockchain intelligence firm TRM Labs states that 70% of the thefts were due to North Korean-sponsored actors.

The report, “H1 2025 Crypto Hacks and Exploits: A New Record Amid Evolving Threats,” claims North Korean groups were responsible for $1.0 billion of the stolen funds, making the total 10% higher than the previous high set in 2022. TRM reported that North Korea has confirmed its status as the most active nation-state threat actor in the crypto space.

The reported losses in H1 2025, over $2 billion, mark the highest six-month total ever recorded, largely driven by the February hack of the exchange Bybit, which involved Ethereum and related assets—the biggest hack in industry history.

The breach was traced back to a compromised developer laptop, specifically a malicious Docker project that interacted with a high-level Safe developer’s workstation. Authorities and TRM Labs attribute the attack to North Korean hackers. The report states, “Inflating the average hack size and highlighting nation-states’ strategic use of cybercrime, the February 2025 Bybit breach… changed the narrative for the year.” The report stated.

ABOUT THE AUTHOR See More
Olumide Adesina
Financial Market Writer
Olumide Adesina is a French-born Nigerian financial writer. He tracks the financial markets with over 15 years of working experience in investment trading.

Related Articles

HFM

Doo Prime

XM

Best Forex Brokers