Storyline
North Korean hackers responsible for 76% of crypto thefts in 2026, stealing $6 billion since 2017
North Korean state-backed hackers have intensified their crypto theft activities in 2026, accounting for 76% of all crypto hack losses this year.
Current brief openSource links open
This current storyline is open here with summary, metadata, source links, continuity context, and full evidence. Paid is for compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.4 top sources shown
Overview
North Korean state-backed hackers have intensified their crypto theft activities in 2026, accounting for 76% of all crypto hack losses this year.
Score total
1.85
Momentum 24h
5
Posts
5
Origins
4
Source types
2
Duplicate ratio
20%
Why now
- 2026 data reveals a sharp increase in North Korean crypto theft activity.
- Recent high-profile DeFi hacks underline the ongoing risk.
- Understanding this threat is critical for crypto stakeholders to mitigate losses.
Why it matters
- Highlights a major security threat to crypto markets from state-backed actors.
- Shows the vulnerability of DeFi platforms to sophisticated hacking campaigns.
- Emphasizes the need for enhanced security and monitoring in crypto ecosystems.
Continuity snapshot
- Trend status: insufficient_history.
- Continuity stage: broad_confirmed.
- Current status: open.
- 5 current source-linked posts are attached to this storyline.
All evidence
All evidence
Decrypt
decrypt.co · decrypt.co · 2026-04-30 18:42 UTC
CoinDesk
coindesk.com · coindesk.com · 2026-04-30 13:37 UTC
North Korea accounts for 76% of 2026 crypto hack losses, with theft since 2017 topping $6 billion: TRM Labs
the_block_crypto · theblock.co · 2026-04-30 13:10 UTC
TRM Labs via Crypto.News
crypto.news · crypto.news · 2026-04-30 17:31 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 0
Top publishers (this list)
- decrypt.co (1)
- coindesk.com (1)
- the_block_crypto (1)
- crypto.news (1)
Top origin domains (this list)
- decrypt.co (1)
- coindesk.com (1)
- theblock.co (1)
- crypto.news (1)