CrowdStrike Says North Korea-Linked Crypto Theft Hit $2.02B in 2025

CrowdStrike reported on May 14, 2026, that North Korea-linked cyber actors stole an estimated $2.02 billion in digital assets during 2025, a 51% year-over-year increase and the highest annual total recorded for those operations. The firm said cumulative losses tied to DPRK-nexus activity have reached about $6.75 billion.

North Korea-Linked Actors Drove 60% of Crypto Theft in 2025

Editorial portrait of a cybersecurity analyst at a desk with dual monitors showing blockchain transactions and red alerts.

North Korea-linked actors were responsible for roughly $2.06 billion in cryptocurrency theft in 2025, equal to about 60% of all reported losses that year, according to CertiK analysis. The concentration of losses shows state-linked crypto theft becoming a dominant custody and counterparty-risk factor for exchanges, trading desks and institutional treasuries.

Attorney says Drift’s April exploit may amount to civil negligence

Crypto security analyst reviews Drift incident report on screen with hardware wallet and air-gapped device.

Drift Protocol’s $270 million to $285 million exploit on April 1, 2026 is now being viewed through a legal lens that could prove as consequential as the technical fallout. The core argument emerging from post-incident commentary is that the breach may qualify not only as a security failure, but as civil negligence.