North Korea is still a threat to crypto: Chainalysis

While North Korea didn’t steal as much money last year, the number of attacks climbed

article-image

Artwork by Crystal Le

share

A new Chainalysis report showed that North Korea-linked hacks are on the rise, despite a decrease in the total value stolen compared to the previous year.

The report estimates that North Korea-linked attackers stole roughly $1 billion in 2023, down slightly from the all-time high of $1.7 billion in 2022. 

However, the number of hacks are on the rise. The report believes North Korea clocked its highest number of known attacks at 20.

In comparison, North Korea was linked to 15 attacks in 2022.

The majority of the billion-dollar sum comes from DeFi platforms, which saw $428 million stolen. Centralized services lost $150 million, and exchanges suffered losses of $330 million. Stolen funds from wallet providers came in at $127 million. 

Read more: North America remains crypto’s biggest and best market: Chainalysis

However, “2023 saw a notable decrease of North Korean targeting of DeFi protocols, mirroring the overall drop in DeFi hacking,” the report said

Looking at the overall landscape, 2023 saw a 54% decrease in funds stolen from 2022. Keep in mind, though, that 2022 was one for the record books, with $3.7 billion stolen. Hackers only made off with $1.7 billion last year. 

Individual hacks increased last year to 231, up from 219 in 2022. The report said that the decrease in stolen funds is linked to the drop in DeFi hacking. In total, DeFi protocols lost $1.1 billion last year, down from $3.1 billion in 2022.

Read more: The 5 biggest DeFi hacks of 2023

While on and off-chain vulnerabilities “present serious concerns” for DeFi protocols, there’s reason for “optimism” the report found.

“I do think that the increase of security measures in DeFi protocols is a key factor in the reduction in the quantity of hacks related to smart contracts vulnerabilities,” Mar Gimenez-Aguilar, lead architect at Halborn, said.

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (27).png

Research

Solana's spot trading landscape will remain bifurcated: prop AMMs will own the short-tail of highly liquid pairs, while passive AMMs continue drifting toward the long-tail. Both can win via vertical integration, but in opposite directions: passive AMMs are moving closer to users through token issuance platforms (e.g., Pump-PumpSwap, MetaDAO-Futarchy AMM), while prop AMMs are moving down the stack into transaction landing services and infrastructure (e.g., HumidiFi-Nozomi). The venues most at risk are legacy AMMs with limited end-user control and no durable, launch-driven source of order flow.

article-image

Some systems improve by failing — and crypto has no choice

article-image

Yield Basis introduces an IL-free AMM design that already dominates BTC DEX liquidity

article-image

Maybe tokenholders don’t need the rights that corporate shareholders have come to expect

article-image

As Hyperliquid and Lighter battle for perps DEX dominance, Boros could capture the structural upside

article-image

Investors are often right about the future, but wrong about the returns

article-image

A look back at 2025, reflections on our industry, and what it means for Blockworks in 2026