Ethereum Bears the Brunt of North Korea’s Crypto Heists in Record $2.1 Billion Theft
By Olumide Adesina
Sunday, June 29, 2025
In the first half of 2025, cryptocurrency thefts reached an unprecedented $2.1 billion, setting a new record for six-month crypto heists. A significant majority—approximately 70%—of these thefts have been linked to North Korean-sponsored hacking groups, according to a recent report by blockchain intelligence firm TRM Labs.
North Korea Emerges as Top Nation-State Threat Actor
TRM Labs’ report, titled “H1 2025 Crypto Hacks and Exploits: A New Record Amid Evolving Threats,” highlights that North Korean hacking groups were responsible for $1.0 billion of the stolen cryptocurrency during this period. This represents a 10% increase over the previous peak of crypto thefts traced back to the country in 2022. The findings solidify North Korea’s position as the most active and menacing nation-state threat actor within the cryptocurrency ecosystem.
The report underscores a growing trend: the strategic utilization of cybercrime by nation-states to further their objectives, blurring the lines between traditional geopolitical conflict and emerging financial cyber warfare.
The Bybit Hack: Largest in Crypto History
The staggering total losses were notably influenced by the February 2025 hack of Bybit, one of the world’s leading crypto exchanges. This incident alone accounted for a record-breaking theft involving Ethereum (ETH) and related assets. The breach was traced to a compromised developer’s laptop, where a malicious Docker project infiltrated the workstation of a high-level “Safe” developer, granting attackers access to critical systems.
Authorities and cybersecurity experts attribute this sophisticated attack to North Korean hackers, showcasing their increasing capabilities and tactical prowess in exploiting vulnerabilities within the crypto infrastructure.
TRM Labs commented on the event, stating,
“Inflating the average hack size and highlighting nation-states’ strategic use of cybercrime, the February 2025 Bybit breach… changed the narrative for the year.”
This attack not only amplified the scale of crypto theft for the year but also signaled a shift in the dynamics of digital asset security threats.
Ethereum: A Primary Target for Theft
Ethereum assets bore the brunt of these heists, emerging as a primary target amidst the thefts. Given Ethereum’s widespread use in decentralized finance (DeFi), non-fungible tokens (NFTs), and smart contract applications, the platform’s ecosystem presents lucrative prospects for cybercriminals seeking high-value targets.
This surge in thefts raises alarms regarding the robustness of security frameworks across exchanges and the broader crypto infrastructure, urging increased vigilance and innovation to safeguard digital assets against such nation-state level threats.
Implications for the Crypto Industry
The findings of the TRM Labs report highlight the urgent need for exchanges, developers, and regulators to bolster defenses and collaborate on intelligence sharing. As nation-states like North Korea increasingly exploit the crypto space for illicit financial gains, the risk landscape for investors and platforms alike intensifies.
Industry stakeholders may need to implement more stringent security protocols, adopt advanced threat detection systems, and develop international coalitions to combat these cyber threats effectively.
Live Ethereum (ETH/USD) Rates and Market Insights
Traders and investors following Ethereum should remain attentive to evolving security developments and market reactions stemming from these high-profile breaches. FX Leaders provides live ETH/USD charts, market analysis, and trading strategies to assist market participants in navigating this challenging environment.
About the Author
Olumide Adesina is a financial market writer with over 15 years of experience in investment trading. Born in France and of Nigerian descent, he specializes in covering forex, cryptocurrency, and global financial market trends.
For further market updates, trading signals, and educational resources on forex and cryptocurrencies, visit FX Leaders.
Disclaimer: The content provided is for informational purposes only and does not constitute financial advice. Investors should conduct their own research or consult financial experts before making investment decisions.