Yeliz Akmaca 
2025 became a historic turning point for cybersecurity in the crypto market. North Korea-linked hacker groups stole over $2 billion in Ethereum, Solana, and other digital assets throughout the year. The number of attacks decreased, but the size of individual hacks reached record levels.
If you want to learn all major crypto hacks of 2025 and North Korea’s methods, read on for full details.
Why 2025 Crypto Hacks Were Fewer but More Destructive
On-chain analytics firms report that North Korea-linked attacks fell by 74% compared to 2024. Despite fewer incidents, the total stolen assets increased significantly. Hackers focused on high-yield, long-planned operations rather than numerous small attacks.
This strategy shift shows that even with increased security investments, crypto firms remain vulnerable. Attackers adapted to defense systems, developing increasingly sophisticated methods.
Bybit Hack Becomes Historic
In February 2025, Bybit was hacked for $1.5 billion, marking the largest single crypto theft in history. This single attack accounted for most of the stolen funds in 2025.
Other breaches, like the Upbit hack, demonstrated that centralized exchanges still carry high risk. Large liquidity makes these platforms attractive targets for state-backed hackers.
Top 10 Biggest Crypto Hacks in History (Up to 2025)
-
Bybit (2025) – $1.5B ETH stolen
-
Coincheck (2018) – $534M NEM stolen
-
FTX (2022) – $477M crypto lost
-
Mt. Gox (2014) – $460M Bitcoin stolen
-
DMM Bitcoin (2024) – $308M BTC stolen
-
KuCoin (2020) – $281M crypto stolen
-
WazirX (2024) – $230M assets stolen
-
BitMart (2021) – $196M ETH and BNB stolen
-
BitGrail (2018) – $170M Nano tokens stolen
-
CoinBene (2019) – $105M ETH stolen
How North Korea’s Crypto Hack Strategy Evolved
Since 2016, North Korea has stolen $6.75 billion in crypto assets. In 2025, their tactics changed significantly. Hackers now infiltrate crypto firms as IT employees, gaining insider access to security systems and private key processes.
Some groups even impersonate recruitment teams of major crypto firms, conducting fake job interviews to trick targets into downloading malicious software that steals login credentials.
Why North Korea Leads in Crypto Hacks
Crypto exchanges handle billions in assets daily. A single successful breach can fund North Korea’s state activities for months.
By early December 2025, total crypto theft reached $3.4 billion, with 59% linked to North Korea, highlighting their dominance in the global crypto hack ecosystem.
Individual Wallet Attacks Rise, Losses Decline
Approximately 158,000 hacks targeted personal wallets in 2025. Around 80,000 users lost crypto in these attacks. Despite more victims, total personal losses fell to $713 million, down from $1.5 billion in 2024.
This indicates stronger personal security but a shift toward smaller, more numerous targets.
Legal Pressure and a New Era
Regulatory scrutiny increased in 2025. Recently, a court ruled that XRP is legally considered property, setting a precedent for stolen crypto cases.
Experts predict this will lead to more investigations and enforcement actions in the future.
How North Korea Launders Stolen Funds
Researchers found North Korean hackers use Chinese money-laundering services and cross-chain bridges to obscure fund movement. A 45-day dormant period after major thefts is typical, followed by fragmented transfers across different networks.2025 data show crypto hacks did not decline—they became more centralized and destructive. North Korea remains the largest state-backed threat to the crypto ecosystem.
Security is no longer just technical; it is a strategic factor directly affecting market stability for exchanges, DeFi protocols, and individual users.
You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.