Chainalysis Reports $2.17 Billion in Crypto Theft in H1 2025 Due to North Korean Cyber Attacks

Surge in Cryptocurrency Theft: Over $2 Billion Stolen in H1 2025

In a staggering revelation, blockchain security firm Chainalysis has reported that hackers pilfered more than $2 billion in cryptocurrency during the first half of 2025. This alarming trend highlights the increasing threats and vulnerabilities within the crypto space, affecting both large platforms and individual holders alike.

The Bybit Hack: A Pivotal Incident

At the forefront of these thefts is the notorious hack of Dubai-based crypto exchange Bybit, where a staggering $1.5 billion was stolen in February. This attack has been attributed to hackers with links to North Korea, marking it as the largest cryptocurrency theft to date. The Bybit incident alone constitutes 69% of all funds stolen this year, underscoring how singular events can dramatically skew overall theft statistics.

Unprecedented Losses Recorded

With a total theft of $2.17 billion already reported, 2025 has surpassed the cumulative losses recorded for the entirety of 2024. In a reflection of escalating cybercrime, these figures represent the highest amount of stolen cryptocurrency recorded within the first six months of any year since Chainalysis began tracking such statistics in 2022. Going further, Chainalysis forecasts that thefts could reach up to $4 billion by the end of 2025 if current trends persist.

The Broader Implications of Crypto Crime

Researchers from Chainalysis have highlighted several critical aspects of this growing threat. They note that even well-established industry players, such as exchanges, are not immune to sophisticated and relentless cyber threats. Additionally, the surge in compromises of personal cryptocurrency wallets raises the specter of risk for individual holders—an alarming trend that underscores the importance of security awareness in the crypto community.

Rising Physical Threats and Personal Wallet Compromises

Chainalysis has identified troubling trends beyond digital thefts. An increase in personal wallet compromises and incidents of “wrench” attacks—where physical violence or coercion is leveraged against cryptocurrency holders—indicates that the threat landscape is evolving. The report shows a notable rise in losses from compromised personal wallets storing Bitcoin, suggesting that hackers are increasingly targeting higher-value individual holdings. Alarmingly, there have already been potentially double the number of physical attacks in 2025 compared to the previous highest year recorded.

Global Distribution of Theft Victims

The geographical distribution of victims reveals that countries such as the U.S., Germany, Russia, Canada, Japan, Indonesia, and South Korea have experienced the highest concentrations of stolen funds. This indicates a global network of targets, emphasising the broad nature of the crypto theft phenomenon.

Correlation with Nation-State Cybercrime

Data from Chainalysis aligns closely with the findings released by blockchain intelligence firm TRM Labs, which reported $2.1 billion stolen across at least 75 distinct hacks and exploits. Interestingly, TRM Labs also highlighted a specific incident in June involving an attack on Iran’s largest crypto exchange, Nobitex, which resulted in the theft of more than $90 million. This further illustrates the growing involvement of nation-states in cryptocurrency theft and poses significant geopolitical implications.

Long-Term Trends and Concerns

In a broader context, the United Nations has previously stated that it is monitoring dozens of incidents over five years that have reportedly netted North Korea around $3 billion. These disclosures signify a troubling pattern of state-sponsored cybercriminal activity aimed at seizing cryptocurrency assets, further complicating global efforts to secure the digital financial ecosystem.

Conclusion: The Path Forward for Crypto Security

As the cryptocurrency landscape continues to evolve, so too must its security measures. The unprecedented levels of theft observed in the first half of 2025 serve as a wake-up call for both industry leaders and individual holders. With sophisticated cybercriminal organizations and even nation-states targeting cryptocurrencies, enhancing security protocols is more crucial than ever. Awareness, education, and proactive measures will play a key role in navigating the increasingly perilous environment of digital currencies.

Learn more.