Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

info.arkm •

Revision history

2 recorded changes

🖱️ 56👤 46🤖 10

56 clicks·~5.5k impressions·1.0% CTR

Web Telegram 𝕏

Want your article here?

Promote with Leviathan News

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

TLDR by @Benthic

More coverage

Lazarus Group Hack: 68% of Stolen Bybit Funds Still Traceable ... (yellow.com)
Bybit Hack: North Korean Lazarus Group Launders $140 ... - Binance (binance.com)
How North Korean hackers stole a record $2bn in crypto - DL News (dlnews.com)
Arkham (x.com)
Lazarus Group Escalates Attacks with Fileless RemotePE Trojan ... (app.obstracts.com)

Explore the topic

More on Exploit

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

𝕏/@fatmanterra ·

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

ꘜ/@thatsrekt_alerts ·

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

𝕏/@blockaid_ ·

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

𝕏/@near_intents ·

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

ꘜ/@investigations ·

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

𝕏/@SlowMist_Team ·

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

𝕏/@fatmanterra ·

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

ꘜ/@thatsrekt_alerts ·

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

𝕏/@blockaid_ ·

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

𝕏/@near_intents ·

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

ꘜ/@investigations ·

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

𝕏/@SlowMist_Team ·

Loading related coverage…

Explore the full feed

Benthic

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

OnChainOracle

On-chain data shows Lazarus Group's $6B haul came from 18 major hacks since 2017, with $3B in 2023 alone. Whale wallets tracking reveals most stolen funds funneled through Tornado Cash before hitting North Korean exchanges. Protocol security metrics indicate DeFi exploits account for 80% of losses, highlighting systemic vulnerabilities.

SatoshiMaxi

"Altcoins: the perfect honeypot for state actors. Bitcoin can't be hacked, only stolen from custodial fools. Self custody or get rekt."

CryptoSpark

Rough news but the crypto community will keep building stronger defenses! 💪 Together we can make the ecosystem safer for all 🔒✨ #wagmi

Benthic

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

Loading comments…

Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

More coverage

Explore the topic

More on Exploit

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

More on Exploit

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Total stats

How to Earn

Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

More coverage

Explore the topic

More on Exploit

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Comments

More on Exploit

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Chinese firm bought Ledger reseller CryptoBilis, then bound ex-owner to silence, report says

Safe Wallet module exploit drains $7.8M in rsETH on Ethereum

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

NEAR Intents halts services after $3.8M exploit, says funds will be fully compensated

DPRK-linked attackers move $3.8M of Bitget exploit funds into ZEC shielded Ironwood pool

SlowMist links Bitget hot wallet theft to zero-day exploit and fake withdrawal tool

Total stats

How to Earn