North Korea arrests hackers in bank crypto laundering bust
Get the Finance newsletter
Daily finance — markets, central banks, M&A, the prints that move money. Free.
- North Korean authorities arrested former military hackers accused of breaching the Central Bank of the DPRK and Foreign Trade Bank, diverting foreign currency and state trade funds into overseas crypto wallets, according to a Daily NK report citing an anonymous Pyongyang source that could not be independently verified.
- Chinese brokers in the border cities of Sinuiju and Hyesan allegedly converted the stolen crypto into U.S. dollars and yuan in real time, with the suspects splitting transfers into small amounts and using encrypted messaging apps, unregistered phones, and Chinese wireless equipment to avoid detection.
- North Korea's National Intelligence Agency detained the suspects at a Pyongyang safe house on July 12 after officials flagged discrepancies in foreign-currency payment approvals and suspicious overseas IP activity.
- North Korean hackers stole a record $2 billion in crypto last year, according to Chainalysis, while TRM Labs estimated they accounted for 76% of crypto hack and scam losses through April.
- Multinational sanctions monitors say Chinese over-the-counter traders and financial institutions play a central role in converting Pyongyang-linked stolen crypto into fiat — the same laundering pipeline the arrested group allegedly relied on.
Why it matters: The case lays bare the Chinese-broker laundering route that underpins North Korea's broader crypto theft operations, and shows Pyongyang willing to pursue its own operators when they steal from state coffers — even as regime-linked hackers continue to dominate global crypto crime at an estimated 76% of losses.
Ask SkimNews
