North Korea refutes TRM Labs report of $577 million worth of crypto theft


North Korea has come out to deny claims that the regime is responsible for cryptocurrency thefts and “all internet-related scams.”

The rejection comes less than a week after blockchain intelligence firm TRM Labs published its findings, which linked North Korean state-sponsored assets to 76% of all cryptocurrencies lost to hackers so far this year.

A North Korean Foreign Ministry spokesman described the allegations as a “ridiculous slander” spread by “US government agencies, creep media, and conspiracy-instigating organizations” for political purposes.

In a report on Sunday, the spokesman said it was completely unreasonable for the United States, which portrays itself as the world’s best cyber power, to claim victimhood, while… Blame the DPRK For all internet related scams. The spokesman added that this is “an extension of the US hostile policy towards the DPRK.”

The spokesman concluded by saying that North Korea will actively follow all necessary measures to defend its interests.

TRM Labs says North Korean hackers stole $577 million this year

TRM Laboratories a report Thursday is especially relevant North Korean hackers to the Drift Protocol exploit and KelpDAO Bridge, all happening in April. Total losses amounted to $577 million, representing 76% of the total cryptocurrencies lost in hacks in 2026 alone.

Data show that the share of cryptocurrency theft by North Korean actors has increased steadily since 2020, from less than 10% to 64% in 2025, and now 76% in just the first four months of the year.

North Korea refutes TRM Labs report of $577 million worth of crypto theft
Share of cryptographic losses for DRPK. SOURCE TRM Laboratories
It took months to hack the Drift Protocol Social engineeringincluding what TRM described as in-person meetings between North Korean agents and Drift employees.

The on-chain phase began on March 11 with a withdrawal from Tornado Cash, according to TRM Labs. The attacker exploited a Solana feature called “nonce” to pre-sign transactions, then executed 31 withdrawals in about 12 minutes on April 1, resulting in $285 million in losses.

The KelpDAO breach exploited a flaw in the design of the single validator in the LayerZero bridge. After Arbitrum froze approximately $75 million in stolen funds, the attackers focused on laundering the money through THORChain, converting the stolen ETH into Bitcoin, with losses reaching $292 million.

TRM Labs attributed the KelpDAO exploit to TraderTraitor, an operation of the Lazarus Group, and says another North Korean group different from TraderTraitor was responsible for the Drift Protocol exploit.

American bodies link North Korean representatives to the Ronin and Bybit hacks

Over the past years, there have also been official reports from US government agencies linking North Korean hackers to major cryptocurrency hacks.

In February 2025, the FBI issued a public service statement definitively saying that North Korea’s TraderTraitor was responsible for the $1.5 billion Bybit hack earlier in the month. North Korea’s Lazarus Group was also blamed for the $615 million Ronin Network hack.

The FBI also issued an official report, saying that DPRK actors were responsible for the loss of hundreds of millions of dollars in cryptocurrencies in 2023, from projects including Stake and Harmony’s Horizon Bridge.

In other news, Cryptopolitan I mentioned Plaintiffs with approximately $877 million in unpaid U.S. court judgments against North Korea filed a restraining notice on April 30 to prevent the Arbitrum DAO from transferring approximately $71 million of frozen ETH associated with the KelpDAO exploit.



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *