A sophisticated cyberattack compromised Scroll co-founder Ye Chen’s X account, with hackers posing as platform staff to launch phishing campaigns targeting high-profile cryptocurrency figures.

North Korea has set a new records when it comes to crypto theft in 2025, stealing a total of billions through increasingly sophisticated cyber operations that underscore how deeply digital asset crime has become embedded in the regime’s state strategy.

North Korean hackers are using fake video calls and hijacked accounts to trick crypto users into installing malware. The attacks give them full control of devices, allowing them to steal crypto wallets and spread the scam through trusted contacts.

South Korea’s largest crypto exchange, Upbit, has reported a $36 million exploit on the Solana network, a breach that unfolded with unsettling precision on November 27 — the exact date the platform suffered its notorious 2019 hack, when 342,000 ETH were siphoned by North Korea’s Lazarus Group.

The U.S. Department of Justice has intensified its pursuit of North Korea’s state-backed hacking operations, launching a major forfeiture action against $15.1 million in stolen Tether (USDT) while simultaneously securing guilty pleas from five individuals who helped Pyongyang’s operatives embed themselves deep inside America’s corporate infrastructure.

Binance founder Changpeng “CZ” Zhao appears to have become the latest target in what experts describe as a state-backed retaliation campaign by North Korea’s notorious hacking unit, the Lazarus Group.

North Korea-linked hackers have stolen over $2 billion in cryptocurrency in 2025, including a $1.46 billion breach of Bybit and multiple attacks on smaller platforms. They are increasingly targeting wealthy individuals using scams and social engineering, while laundering stolen funds through complex methods to avoid detection.

A North Korea-linked group used AI to create a fake South Korean military ID and launch a phishing campaign targeting journalists, researchers, and human rights workers. The attack highlights the growing use of AI in cyber-espionage, with authorities warning of increased risks and urging stronger security measures.

Binance’s Chief Security Officer, Jimmy Su, has named the North Korean hacking group Lazarus as the company’s single biggest security threat, as the exchange continues to fend off persistent infiltration attempts from the country.

An Arizona-based TikTok influencer has been sentenced to eight and a half years in federal prison for helping North Korean operatives infiltrate U.S. tech and cryptocurrency firms using stolen identities and fraudulent documents.