Key Takeaways:
- North Korea’s Bitcoin holdings now surpass these of El Salvador and Bhutan.
- The Lazarus Group, linked to North Korea, transformed property from the Bybit hack into Bitcoin.
- These cyber actions contribute to North Korea’s funding of its weapons packages.
North Korea surpassed El Salvador and Bhutan in Bitcoin (BTC) holdings after the Lazarus hacker group transformed stolen property from the Bybit hack into Bitcoin, in response to Arkham knowledge as of March 17.
Arkham knowledge reveals that Lazarus, liable for the report $1.5 billion Bybit hack, transformed the stolen Ether to 13,518 Bitcoin (value $1.14 billion).
The group additionally holds practically 13,791 Ether and 5,022 Binance Coin (BNB), valued at $26.68 million and $3.16 million, respectively.
These holdings place North Korea forward of Bhutan’s 10,635 mined Bitcoin and El Salvador’s 6,118 Bitcoin.
Bitcoin Treasuries knowledge locations the US, China, the UK, and Ukraine forward, with reserves of 198,109, 190,000, 61,245, and 46,351 BTC.
The Scale of North Korean Cybercrime
North Korea’s huge wealth in cryptocurrencies stems from years of cyberattacks and crypto heists, together with the 2024 DMM Bitcoin exploit in Japan and the 2022 Ronin Community breach, the place Lazarus stole $308 million and over $600 million, respectively.
The Lazarus Group refers to a big subset of state-sponsored cyber actions of the Democratic Individuals’s Republic of Korea (DPRK), working as an integral wing of North Korea’s central overseas intelligence company, the Reconnaissance Common Bureau (RGB).
Chainalysis’ Crypto Crime 2025 Report reveals North Korean hackers stole $660.5 million in 2023 and $1.34 billion in 2024, marking a 102.88% year-over-year enhance.
One of the latest examples of North Korea’s increasing cyber operations is the Bybit hack.
Bybit Assault: North Korea’s Large Crypto Theft
The dramatic enhance in North Korea’s Bitcoin holdings is immediately linked to the February 2025 assault on the Dubai-based cryptocurrency alternate Bybit.
The Lazarus Group organized the theft of over 400,000 Ether from Bybit’s safe multi-signature chilly pockets.
Following the theft, Lazarus employed subtle strategies to launder the stolen Ether and convert it into Bitcoin.
The group exploited decentralized finance (DeFi) protocols like THORChain, which confronted criticism for missing sturdy anti-crime protections.
This allowed Lazarus to obscure the origins of the stolen funds and facilitate their conversion into Bitcoin.
This assault has penalties past Bybit’s monetary losses.
In response to the Heart for Strategic & Worldwide Research (CSIS), proceeds from cyberattacks, together with different illicit wealth generated by North Korean-funded syndicates, fund North Korea’s nuclear missile program and pose a significant menace to worldwide safety.
The submit North Korea Surpasses El Salvador in Bitcoin Holdings, Fueled by Bybit Hack appeared first on Cryptonews.