89% versus 15%: in five years, North Korean hackers have gone from the sidelines to center stage 🦖
According to the latest Chainalysis figures through October 29, suspected North Korea-linked attacks accounted for nearly 89% of reported hacking losses this year. In 2021, that figure was just 15%.
👥 一起来群里抬杠
The average loss per attack also rose from $50.65 million to $185.65 million, about 3.7 times higher.
Even more striking is the cumulative tally. From 2021 through October 29 this year, reported global losses from theft totaled $22.34 billion, of which $13.24 billion was suspected to be linked to North Korea—about 59%.
Put another way, over the past five years, roughly $6 out of every $10 stolen has flowed in the same direction.
And this week's $6.3 billion exchange hack hasn't yet been included in these figures.
The data runs through October 29, and the case was only made public on the 30th. Add it in, and this year's share will look even worse.
There's a contrast here that's easy to overlook: the number of North Korea-linked attacks hasn't been extraordinarily high. What's changed is the amount stolen in each attack.
The average haul has jumped from around $50 million to nearly $200 million, suggesting that targets have shifted from individual wallets to exchanges' signing infrastructure and supply chains.
Scamming individuals means doing it one by one; hit the infrastructure once, and you can walk away with billions 💥
That's also why the industry's first response this week wasn't to pursue the stolen funds, but to freeze assets.
Tether froze more than $1.5 billion in USDT, and Circle froze about $800 million in USDC, for a combined total of roughly $3 billion.
But freezing assets only shuts the door; it doesn't mean the money has been recovered. No one can freeze stolen bitcoin at the network level ⚠️
My take is that what the 89% figure really highlights isn't how powerful North Korea is, but how concentrated the industry's risk has become in a handful of single points of failure.
Exchange hot wallets, signing systems, cross-chain bridges: a breach at any one link can mean losses in the billions.
For ordinary holders, self-custody can protect against a platform collapse, but it can't protect against compromised signing infrastructure or a poisoned supply chain 🏦
What can really change this trend is making proof of reserves standard practice, diversifying custody, and setting audit standards for cross-chain bridges.
There are two things to watch next: the proof-of-reserves report on November 2, and whether attribution in this case can ultimately be confirmed.
What do you think will be targeted next, an exchange or a cross-chain bridge? Let's talk in the comments.
Every day, I bring you the latest in crypto security and fund flows—not just what happened, but the logic and opportunities behind the headlines 👀🚀
According to the latest Chainalysis figures through October 29, suspected North Korea-linked attacks accounted for nearly 89% of reported hacking losses this year. In 2021, that figure was just 15%.
👥 一起来群里抬杠
The average loss per attack also rose from $50.65 million to $185.65 million, about 3.7 times higher.
Even more striking is the cumulative tally. From 2021 through October 29 this year, reported global losses from theft totaled $22.34 billion, of which $13.24 billion was suspected to be linked to North Korea—about 59%.
Put another way, over the past five years, roughly $6 out of every $10 stolen has flowed in the same direction.
And this week's $6.3 billion exchange hack hasn't yet been included in these figures.
The data runs through October 29, and the case was only made public on the 30th. Add it in, and this year's share will look even worse.
There's a contrast here that's easy to overlook: the number of North Korea-linked attacks hasn't been extraordinarily high. What's changed is the amount stolen in each attack.
The average haul has jumped from around $50 million to nearly $200 million, suggesting that targets have shifted from individual wallets to exchanges' signing infrastructure and supply chains.
Scamming individuals means doing it one by one; hit the infrastructure once, and you can walk away with billions 💥
That's also why the industry's first response this week wasn't to pursue the stolen funds, but to freeze assets.
Tether froze more than $1.5 billion in USDT, and Circle froze about $800 million in USDC, for a combined total of roughly $3 billion.
But freezing assets only shuts the door; it doesn't mean the money has been recovered. No one can freeze stolen bitcoin at the network level ⚠️
My take is that what the 89% figure really highlights isn't how powerful North Korea is, but how concentrated the industry's risk has become in a handful of single points of failure.
Exchange hot wallets, signing systems, cross-chain bridges: a breach at any one link can mean losses in the billions.
For ordinary holders, self-custody can protect against a platform collapse, but it can't protect against compromised signing infrastructure or a poisoned supply chain 🏦
What can really change this trend is making proof of reserves standard practice, diversifying custody, and setting audit standards for cross-chain bridges.
There are two things to watch next: the proof-of-reserves report on November 2, and whether attribution in this case can ultimately be confirmed.
What do you think will be targeted next, an exchange or a cross-chain bridge? Let's talk in the comments.
Every day, I bring you the latest in crypto security and fund flows—not just what happened, but the logic and opportunities behind the headlines 👀🚀