버그 바운티 보상은 심각도 및 취약점의 영향력에 따라 그룹화됩니다. 각 심각도 수준에 해당하는 취약점 유형에 대한 예시와 설명은 아래에서 확인할 수 있습니다. 지급 금액은 웹사이트/앱과 스마트 계약에 대해 별도의 척도가 있는 4단계 구조로 되어 있습니다.

직책 입력

헤드라인

직책

{{currentSectionTitle}}에 대해 더 알아보기

이름

제목을 입력해 주세요

취약점과 영향을 받는 자산에 대한 간략한 설명을 입력하세요.

주제

핵심 팀은 국제 사법 협력, 형사 사법 시스템, 자금 세탁 방지 및 부패 측면에서 낮은 종합 등급을 받은 국가에 위치하고 있습니다. 이러한 맥락적 데이터는 사기를 예방하고 완화하는 데 있어 어려움과 복잡성이 증가했음을 시사합니다.

핵심 팀은 국제 사법 협력, 형사 사법 시스템, 자금 세탁 방지 및 부패 측면에서 중간 등급을 받은 국가에 위치하고 있습니다. 이러한 상황별 데이터는 중간 수준의 지리적 책임성을 시사하며, 따라서 사기 위험을 줄이고 완화할 수 있습니다.

핵심 팀은 국제 사법 협력, 형사 사법 시스템, 자금 세탁 방지 및 부패 측면에서 가장 높은 종합 등급을 받은 국가에 위치해 있습니다. 이러한 상황별 데이터는 가장 높은 수준의 지리적 책임을 시사하며, 따라서 위험 감소 및 완화를 극대화합니다.

본 웹사이트에 제공된 정보는 투자 자문, 재정 자문, 거래 자문 또는 기타 어떠한 종류의 자문도 구성하지 않으며, 웹사이트의 콘텐츠를 그러한 목적으로 해석해서는 안 됩니다. CertiK는 어떠한 암호화폐의 매수, 매도 또는 보유도 권장하지 않습니다. 투자 결정을 내리기 전에 반드시 자체적인 실사를 수행하고 재정 고문과 상담하십시오.

취약점 제목

This report analyzes major North Korean crypto hacking trends over the past decade, including total amounts stolen, number of incidents, and the most significant large-scale cyberattacks targeting the cryptocurrency industry.

Skynet DPRK Crypto Threats Report

Read and Learn

North Korea has transformed cryptocurrency theft into a large-scale state revenue operation. Between 2016 and early 2026, DPRK-linked actors stole an estimated $6.75 billion across 263 incidents, though the real figure is likely even higher due to smaller attacks that may have gone unreported. These operations are no longer isolated cybercrimes, but part of a sustained and organized strategy targeting the global crypto ecosystem.

DPRK Cryptocurrency Theft Has Reached Historic Scale

In 2025, the crypto industry recorded 656 security incidents totaling approximately $3.4 billion in losses. DPRK-linked actors were responsible for only 79 incidents, or about 12% of the total number of attacks, yet they accounted for $2.06 billion, representing roughly 60% of all losses. This demonstrates a consistent pattern where DPRK groups prioritize fewer but significantly more profitable attacks.

DPRK Actors Cause Disproportionate Financial Damage

The February 2025 Bybit exploit, which resulted in $1.5 billion in losses, remains the largest cryptocurrency theft in history. Other major incidents, including the Ronin hack ($625 million) and the Drift exploit ($285 million), further demonstrate the increasing sophistication and scale of DPRK-linked operations. These attacks highlight the growing capability of threat actors to compromise major platforms and infrastructure.

Mega-Hacks Continue to Increase in Scale

The trend of high-impact attacks has continued into 2026. From January onward, 185 incidents resulted in approximately $1.1 billion in total losses. Of this amount, roughly $620.9 million, or 55%, was attributed to DPRK-linked actors. A major contributor was the $291 million KelpDAO exploit. These numbers reinforce the ongoing strategy of conducting lower-frequency but extremely high-value attacks.

2026 Trends Show the Threat Is Continuing

Most major DPRK operations begin with social engineering rather than direct technical exploitation. Attackers commonly use fake job offers, impersonate venture capital firms, or distribute malicious repositories to compromise victims. By targeting individuals and developer environments, DPRK actors are often able to gain access before security systems can detect malicious activity.

Social Engineering Is the Primary Attack Method

The Bybit incident demonstrated how DPRK actors increasingly target trusted third-party infrastructure instead of directly attacking smart contracts. Even institutional-grade multisignature wallets can be compromised if attackers successfully infiltrate suppliers, infrastructure providers, or development environments. This shift toward supply chain attacks reflects a broader evolution in operational sophistication.

Supply Chain Attacks Have Become a Key Tactic

After stealing funds, DPRK-linked actors rely on a complex laundering pipeline involving mixers, cross-chain bridges, decentralized exchanges, and OTC brokers. Following the Bybit hack, 86.29% of the stolen ETH was converted into Bitcoin within one month. This rapid movement of assets demonstrates how organized and efficient DPRK laundering infrastructure has become.

Laundering Operations Function at Industrial Scale

The implications of these thefts extend beyond losses for individual projects or users. Intelligence assessments indicate that stolen cryptocurrency is used to support North Korea’s nuclear and ballistic missile programs. As a result, DPRK-linked cybercrime represents not only a cybersecurity threat, but also a broader geopolitical and national security concern.