THE article reports that 76% of all crypto stolen in 2026 is now in Pyongyang, North Korea, based on data analysed by TRM Labs. It notes that almost all of North Korea’s crypto winnings from January to April this year came from two incidents: an attack against Drift Protocol yielding $285 million and another against KelpDAO for about $292 million.
It also highlights major February and April 2025 attacks, including a February 2025 incident in which TraderTraitor stole $1.5 billion worth of Ethereum from ByBit, and an April 2025 feint in which Citrine Sleet swindled nearly $300 million from Drift, with a further attack by TraderTraitor on Kelp for nearly $300 million three weeks later. The piece cautions that, although North Korea did not carry out 76% of all crypto attacks, it has become highly proficient in focused, high-value breaches.
It also references that in 2025, two thirds of all stolen crypto went to Pyongyang. Finally, it mentions that in 2025 Americans lost more than $11 billion in crypto-focused scams, according to the FBI.