Overview
- TRM Labs' report, released Friday, found North Korea-linked actors stole about $643 million in cryptocurrency in the first half of 2026, equal to roughly 66.2 percent of the $972 million lost to hacks worldwide.
- Two April attacks on decentralized finance platforms — a $285 million breach of Drift and a $292 million loss at KelpDAO — together accounted for about $577 million of the H1 2026 haul.
- The report recorded a record 207 crypto hacks in H1 but total losses fell from $2.3 billion in H1 2025 to $972 million in H1 2026, and TRM warned that the drop reflects fewer mega-thefts elsewhere rather than a decline in North Korean capability.
- TRM emphasized its $643 million figure covers only hacking-linked thefts and excludes phishing, scams, covert IT worker schemes and other illicit channels, so actual crypto revenue for Pyongyang is likely higher.
- The U.S., Japan, South Korea and G7 leaders have escalated coordination on sanctions enforcement and law enforcement cooperation to trace and block laundered funds, a move that could pressure DeFi protocols to harden signer and bridge security and affect users who rely on those platforms.