DeFi & NFT

Story: North Korea Grabs $500M in Crypto During Three-Week Blitz

By Maheen Hernandez

1 / 15

How the Hackers Got In. The playbook changed. North Korea's crews aren't going after core smart contracts anymore.

2 / 15

Where the Money Goes. North Korea's total crypto stash sits at $6.75 billion, according to industry estimates.

3 / 15

North Korean hackers just swiped over $500 million from decentralized finance platforms in less than three weeks.

4 / 15

Two massive exploits pushed North Korea's 2026 crypto haul past $700 million. KelpDAO got hit on April 18, losing $290 million in what LayerZero confirmed two days later as a…

5 / 15

The playbook changed. North Korea's crews aren't going after core smart contracts anymore. They're hitting the stuff around the edges instead.

6 / 15

KelpDAO's breach came through the Remote Procedure Call infrastructure that LayerZero Labs uses for its Decentralized Verifier Network.

7 / 15

The Ketman Project spent six months digging into something worse. Turns out around 100 North Korean operatives have jobs at blockchain companies worldwide. Real jobs.

8 / 15

North Korea's total crypto stash sits at $6.75 billion, according to industry estimates. Last year they grabbed $2 billion, including a $1.5 billion score from Bybit exchange.

9 / 15

The money trail shows structural limits in how Pyongyang can move digital assets. Cross-chain mixing helps obscure things, but the reliance on geographically concentrated…

10 / 15

Security experts keep saying the same thing: DeFi platforms need better internal access controls and faster incident response. The weak points aren't always in the code itself.

11 / 15

More context: North Korea Swipes $500 Million in Two Weeks Through DeFi Exploits

12 / 15

The insider threat is real and growing. Those 100 North Korean operatives embedded in blockchain companies aren't just collecting paychecks.

13 / 15

This dual-revenue model works frighteningly well for the regime. IT workers generate steady monthly income while simultaneously positioning themselves for major protocol exploits.

14 / 15

The laundering techniques reveal something important about North Korea's constraints. By sticking to regionalized pathways and avoiding mainstream exchanges, DPRK actors are…

15 / 15

The $6.75 billion figure represents years of persistent, coordinated effort. North Korea didn't stumble into this.

The Currency Analytics

Want the full story?