North Korea Arrests Hackers Over Alleged Crypto Money Laundering

North Korean authorities detained a group of former military hackers for allegedly stealing state funds from two banks and laundering the proceeds through cryptocurrency transactions. According to a report by Daily NK, which cites anonymous sources in Pyongyang, the group hacked into the internal systems of the Central Bank of the Democratic People's Republic of Korea (DPRK) and the Foreign Trade Bank. They allegedly diverted foreign currency and state trade funds into overseas cryptocurrency wallets.

The report claims that the stolen cryptocurrency was converted into cash by Chinese brokers, with operations conducted in real-time at border cities like Sinuiju and Hyesan. By splitting the transfers into smaller amounts, the hackers aimed to avoid detection. Additionally, they reportedly used encrypted messaging apps, unregistered mobile phones, and Chinese wireless equipment to further conceal their activities.

The arrests were made on July 12, following discoveries of discrepancies in foreign-currency payment approvals and indications of suspicious activity from overseas IP addresses. North Korea's National Intelligence Agency is believed to have acted on these findings. This incident underscores that North Korean hackers remain significant players in the global cryptocurrency landscape, consistently involved in hacks and scams. The International community remains vigilant about these activities.

A multinational sanctions-monitoring report indicates that Chinese over-the-counter traders and other financial institutions are crucial in converting cryptocurrency stolen by North Korean hackers into fiat currencies. According to Chainalysis, North Korean hackers are linked to the theft of a record $2 billion in cryptocurrency last year. Furthermore, reports from TRM Labs suggest that they accounted for 76% of crypto-related hack and scam losses through April 2026.

The ongoing challenges posed by North Korean hacking groups raise questions about the security of cryptocurrency systems and highlight the importance of international cooperation in monitoring and preventing cybercrime.