Signal

North Korean hackers responsible for 76% of crypto thefts in 2026, stealing $6 billion since 2017

Evidence first: scan the strongest sources, then decide whether to go deeper.

rsstelegram
cryptohacksdefisecurityon_chain_data
Trend in the last 24h
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
Overview

North Korean state-backed hackers have intensified their crypto theft activities in 2026, accounting for 76% of all crypto hack losses this year.

Entities
TRM LabsKelpDAODrift Protocol
Score total
1.85
Momentum 24h
5
Posts
5
Origins
4
Source types
2
Duplicate ratio
20%
Why now
  • 2026 data reveals a sharp increase in North Korean crypto theft activity.
  • Recent high-profile DeFi hacks underline the ongoing risk.
  • Understanding this threat is critical for crypto stakeholders to mitigate losses.
Why it matters
  • Highlights a major security threat to crypto markets from state-backed actors.
  • Shows the vulnerability of DeFi platforms to sophisticated hacking campaigns.
  • Emphasizes the need for enhanced security and monitoring in crypto ecosystems.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • North Korean hackers account for 76% of crypto hack losses in 2026
  • North Korean-linked hackers have stolen over $6 billion in crypto since 2017
How sources frame it
  • TRM Labs Report: neutral
All evidence
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 0
Top publishers (this list)
  • Decrypt (1)
  • Crypto.News (1)
  • CoinDeskGlobal (1)
  • the_block_crypto (1)
Top origin domains (this list)
  • decrypt.co (1)
  • crypto.news (1)
  • coindesk.com (1)
  • theblock.co (1)