North Korea Holds Majority of Global Stolen Crypto in 2026
AI-generated from multiple sources. Verify before acting on this reporting.
SEOUL (AP) — North Korea now holds 76 percent of all cryptocurrency stolen globally in 2026, marking a significant escalation in the regime's digital currency operations. The concentration of illicit funds within the isolated nation has raised concerns among international financial regulators and cybersecurity experts.
The data indicates a sharp increase in the volume of digital assets funneled into North Korean wallets over the past year. While the total value of stolen cryptocurrency worldwide has fluctuated, the proportion attributed to North Korean state-sponsored hacking groups has reached a new high. The figure represents a substantial shift from previous years, when the distribution of stolen funds was more evenly spread among various criminal organizations and individual actors.
Cybersecurity firms tracking blockchain transactions have identified a pattern of sophisticated attacks targeting exchanges, individual wallets, and DeFi protocols. These operations are widely attributed to state-affiliated groups operating under the direction of the North Korean government. The funds are believed to be used to bypass international sanctions and finance the country's nuclear and missile programs.
The 2026 data reflects a continuation of trends observed in recent years, where North Korean hackers have increasingly turned to cryptocurrency as a primary revenue stream. The regime's reliance on cyber theft has grown as traditional trade routes have been constrained by global economic pressure. The ability to move large sums of value across borders without detection has made digital assets an attractive tool for the state.
Financial intelligence units in the United States, South Korea, and Europe have intensified efforts to trace and freeze stolen assets. However, the decentralized nature of blockchain technology and the use of mixing services have complicated recovery efforts. Authorities have struggled to identify the final destinations of the funds once they enter the North Korean financial ecosystem.
The exact mechanisms used to convert stolen cryptocurrency into usable currency remain unclear. While some transactions have been linked to offshore exchanges and shell companies, the full scope of the laundering infrastructure is not yet known. The regime's ability to maintain control over such a large percentage of global stolen crypto suggests a highly organized and well-resourced operation.
International sanctions have failed to halt the flow of funds, prompting calls for stricter regulations on cryptocurrency exchanges and enhanced cooperation between nations. The United Nations Security Council has discussed new measures to address the threat, but consensus on specific actions has been elusive.
As of May 1, 2026, the question remains how long North Korea can maintain its dominance in the illicit crypto market. The situation continues to evolve as hackers adapt to new security measures and regulatory changes. The global community faces an ongoing challenge in curbing the regime's access to digital assets.