Crypto losses decreased by 46.8% to $1.32 billion in H1 2026, but security firms CertiK and TRM Labs warn this drop is misleading. Attackers are becoming more sophisticated, with North Korean state-sponsored hackers responsible for over 70% of Q2 losses, prompting international discussions.
North Korean hackers, posing as remote IT workers and recruiters, accounted for nearly half of all documented hands-on-keyboard intrusions at US tech companies over the past year, according to a CrowdStrike report. The group 'Famous Chollima' uses AI and stolen identities to infiltrate firms, stealing information and cryptocurrency to fund Pyongyang's weapons programs.
A North Korea-linked hacking group, Kimsuky, is reportedly using AI to develop malware targeting South Korea's government electronic authentication system, posing a significant security threat.
Solana's Drift Protocol says most of the stolen funds linked to North Korean hackers remain traceable—and it has a plan to make victims whole.
Pyongyang-linked hackers drained $577 million from two DeFi platforms in April, underscoring an escalating threat to crypto markets.
