Updated Jul 25, 2026, 3:47 p.m. Published Jul 25, 2026, 3:46 p.m.

1 min read

Lazarus Group, a cybercrime organization run by the North Korean government, may have links to this week's exploit of Euler Finance. (Micha Brandli/Unsplash)
Flags fly in Pyongyang, North Korea (Micha Brandli/Unsplash)

Summary

  • North Korean authorities arrested former military hackers for stealing funds from two state banks and laundering the money through cryptocurrency.
  • The group allegedly breached Central Bank systems, converted crypto to cash via Chinese brokers, and used small transfers to evade detection.
  • North Korean hackers remain major players in global crypto exploits, accounting for a significant majority of hack and scam losses through early 2026.

North Korean authorities arrested former military hackers accused of stealing state funds from two banks and laundering the proceeds through cryptocurrency.

The group, according to a Daily NK report citing an anonymous source in Pyongyang, allegedly breached the internal systems of the Central Bank of the DPRK and Foreign Trade Bank, diverted foreign currency and state trade funds, and moved the money into overseas crypto wallets.

The report could not be independently verified.

Chinese brokers then converted the assets into U.S. dollars and yuan, Daily NK said. Contacts in the border cities of Sinuiju and Hyesan allegedly exchanged the crypto for cash in real time, with the group splitting transfers into small amounts to avoid detection and using encrypted messaging apps, unregistered phones and Chinese wireless equipment.

North Korea’s National Intelligence Agency arrested the suspects at a Pyongyang safe house on July 12 after officials detected discrepancies in foreign-currency payment approvals and suspicious overseas IP activity, according to the report.

The laundering route mirrors methods used by North Korean hacking groups to cash out stolen crypto.

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10

Crypto Flows, Share and the Selective Rotation

Market Spotlight Square Image

Crypto Flows, Share and the Selective Rotation

Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.

Jul 22, 2026

Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.

Why it matters:

Markets repositioned since June, but Binance held share (~55% user funds, ~24% spot) and drew net inflows in early July while the tracked market saw outflows.

View Full Report

Read full story at CoinDesk