Record High Number of North Korean-Linked Crypto Hacks in 2023, but Decreased Value of Stolen Funds
In 2023, there was a significant increase in cyber attacks on crypto platforms linked to North Korea, according to Chainalysis. A total of 20 hacks were reported, resulting in just over $1 billion in stolen funds. However, this represents a 40% decrease from the previous year’s total of $1.7 billion. This decline in stolen funds reflects a broader trend in the crypto security environment and decentralized finance (DeFi) protocols.
North Korean Hackers Adjust Tactics as Crypto Thefts Decline
North Korean hackers have long targeted cryptocurrency to evade international sanctions. The decrease in stolen funds aligns with a reduction in theft from DeFi protocols, which saw a 64% decrease from the previous year, totaling $1.1 billion. Chainalysis attributes this decline to improved security measures and reduced overall activity in DeFi spaces.
Although the success rate of major heists may have slowed for these hackers, they continue to adapt and pose an ongoing threat. As crypto platforms enhance security measures, North Korean hackers employ more diverse and sophisticated strategies.
Factors Contributing to Decreased Stolen Amounts
Besides improved security practices and decreased DeFi activity, investor behavior may also influence the decline in stolen funds. High-profile events like the collapse of FTX may have prompted investors to spread their assets across multiple platforms, reducing the available pool of funds for theft.
North Korea’s Persistent Threat to Crypto
A report by TRM Labs reveals that DPRK-linked hacks have been ten times more damaging than those unlinked to North Korea, resulting in over $3 billion in lost cryptocurrency since 2017. Hackers primarily target digital wallet vulnerabilities and convert stolen funds into hard currency through high-volume brokers.
North Korea’s adaptability in money laundering methods under international scrutiny is notable. Despite sanctions imposed on platforms like Tornado Cash and ChipMixer, DPRK-linked operatives have shifted to alternative tools like the mixer Sinbad. However, with Sinbad also facing sanctions, North Korea continues to explore other laundering options, demonstrating the persistent and evolving nature of this threat to the crypto ecosystem.
Hot Take: North Korean Hackers Adapt as Crypto Security Improves
The increase in cyber attacks linked to North Korea on crypto platforms highlights the ongoing threat posed by these hackers. Although the value of stolen funds has decreased, it signifies a shift in tactics rather than a decline in malicious intent. As security measures improve, North Korean hackers adapt with more sophisticated strategies. Additionally, investor behavior and decreased DeFi activity have contributed to the reduction in stolen amounts. The persistence and adaptability of these hackers underscore the need for continued vigilance in the crypto space.