The US, Japan, and South Korea issue a joint statement saying North Korean-backed hackers stole $659M+ in crypto heists in 2024 and were behind the $235M WazirX
North Korean-backed hackers stole at least $659 million through multiple cryptocurrency heists in 2024, while also deploying …
Context & Ripple Effects
The trilateral attribution follows US-Japan law enforcement’s identification of North Korean actors in the DMM exchange bitcoin theft, turning a bilateral investigative finding into a broader regional security position.
It also fits a longer record of crypto-business losses documented by Elliptic’s accounting of North Korean-linked thefts from 2017 to 2022. The new statement matters because it connects multiple incidents to a single state-backed threat rather than treating them as isolated exchange failures.
First-order effects
- WazirX and the other affected platforms face a more authoritative public attribution of the attacks, while US, Japanese, and South Korean authorities gain a shared basis for investigations and threat communication.
- Crypto exchanges and custodians operating across the three countries must treat North Korean-linked intrusion and laundering activity as an active, named risk rather than a generic cybercrime category.
Second-order effects
- The joint finding increases pressure on exchanges, wallet providers, and blockchain-tracing partners to share indicators and scrutinize transaction flows tied to stolen assets; smaller platforms may face disproportionately high compliance and security costs.
- Competitors seeking institutional users can differentiate on custody controls and incident response, while repeated state-linked losses reinforce customers’ concerns over the concentration of 2024 crypto theft losses.
Third-order effects
- If coordinated attribution becomes routine, crypto-security policy is likely to move further from platform-by-platform loss management toward cross-border national-security coordination, including stronger expectations for reporting and asset tracing.
- Persistent state-linked thefts could deepen the sector’s legitimacy challenge: adoption will increasingly depend not only on market access but on whether custodians and exchanges can demonstrate resilient security and recovery practices.
The trend: Crypto theft is becoming a cross-border security issue, with governments increasingly linking exchange breaches and stolen-asset flows to state-backed actors rather than treating them solely as financial crime.