TRM Labs: North Korea-affiliated hackers were responsible for almost a third of all crypto thefts in 2023, stealing $600M+, which is ~30% less than in 2022
U.S. national security officials have raised concerns about North Korea's use of stolen crypto to develop nuclear weapons. — Register Now
Context & Ripple Effects
Earlier research had already documented large North Korea-linked crypto thefts from businesses through 2022. TRM Labs’ 2023 estimate shows that, despite a year-over-year decline in value stolen, the group remained responsible for an unusually large share of crypto crime.
The national-security concern attached to these thefts raises the stakes beyond losses borne by individual platforms or users. Later coverage of North Korea’s multiyear crypto theft totals suggests the 2023 decline was not, by itself, evidence that the threat had disappeared.
First-order effects
- More than $600 million in crypto was diverted in 2023 by North Korea-affiliated hackers, leaving targeted businesses and users to absorb losses and recovery costs.
- TRM’s finding gives U.S. officials and crypto-risk teams a concrete basis to treat North Korea-linked activity as a material security and sanctions-risk concern, not merely routine cybercrime.
Second-order effects
- Exchanges, custodians and DeFi protocols face stronger incentives to harden wallet and access controls and to monitor illicit-fund flows, increasing demand for blockchain-forensics and security services.
- A concentration of theft among state-linked actors can make banks, payment partners and institutional customers more cautious about their exposure to crypto platforms with weak compliance or security controls.
Third-order effects
- If state-linked theft continues to represent a large share of losses, crypto security becomes part of national-security infrastructure, increasing pressure for more traceability and accountable intermediaries.
- The pattern reinforces the crypto legitimacy gap: the sector’s ability to attract mainstream users and partners will increasingly depend on whether it can reduce high-impact illicit-finance risks without eliminating open participation.
The trend: Crypto theft is increasingly being treated as an illicit-finance and national-security problem, pushing the industry toward stronger security, monitoring and compliance layers.