An in-depth look at North Korea's crypto cyber crime, used to support the regime: hacking Axie Infinity and Bangladesh Bank, running a fraudulent ICO, and more
without hurting its position in the global economy owing to its isolation https://www.ft.com/... https://twitter.com/... Christian Davies / @crsdavies : Cryptocurrency theft has become one of North Korea's main sources of revenue, underlining the consequences of the lack of global regulation of digital assets. Our latest Big Read for the FT: https://www.ft.com/... John Reed / @johnreedwrites : Strong read on North Korea's banditry in the crypto space. “North Korea's growing use of crypto heists have... served to demonstrate the absence of meaningful international regulation of the same markets.” @crsdavies @ScottChipolina https://www.ft.com/...
Context & Ripple Effects
The FT's Big Read lands mid-arc in a story that has been building for years: reporting on North Korea's expanding hacking operations framed them as a revenue engine as early as 2021, and by 2022 spies were infiltrating US crypto firms as remote workers while the UN tallied billions stolen from exchanges. What this piece adds is the case-study layer — the Axie Infinity heist, the Bangladesh Bank attack, a fraudulent ICO — showing one playbook applied across gaming economies, banks, and token launches.
The throughline both Davies and Reed draw is regulatory: crypto theft has become a main revenue source for the regime precisely because digital asset markets lack meaningful international regulation. Later coverage confirms the scale — Chainalysis attributes $6B+ in stolen crypto over the past decade to North Korean hackers, and the US has since shifted to attacking the laundering rails rather than the hacks themselves.
First-order effects
- Crypto exchanges and gaming platforms like Axie Infinity face direct balance-sheet losses from state-scale attackers, forcing them to treat nation-state intrusion as an operating cost rather than an edge case.
- North Korea's weapons programs gain a funding channel that bypasses traditional sanctions, complicating enforcement that was built around banking and trade controls.
Second-order effects
- US regulators and Treasury shift focus downstream to blocking laundering routes — targeting the mixers and cash-out infrastructure — because interdiction at the exchange level keeps failing.
- Crypto firms harden hiring against infiltration after the remote-worker spy operations, adding background-checking and identity-verification costs that fall hardest on smaller exchanges.
Third-order effects
- If the pattern holds, sanctions enforcement migrates from country-level embargoes to blockchain analytics firms like Chainalysis becoming de facto intelligence providers for regulators tracking state theft.
- The regime's success argues for international coordination on digital-asset regulation as a sanctions-enforcement issue, not just a consumer-protection one — the legitimacy gap becomes a national-security gap.
The trend: State-sponsored crypto theft is turning blockchain forensics into a core instrument of sanctions enforcement, with North Korea's heist economy as the forcing case.