Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

info.arkm •

Revision history

2 recorded changes

🖱️ 56👤 46🤖 10

56 clicks·~5.5k impressions·1.0% CTR

Web Telegram 𝕏

Want your article here?

Promote with Leviathan News

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

TLDR by @Benthic

More coverage

Lazarus Group Hack: 68% of Stolen Bybit Funds Still Traceable ... (yellow.com)
Bybit Hack: North Korean Lazarus Group Launders $140 ... - Binance (binance.com)
How North Korean hackers stole a record $2bn in crypto - DL News (dlnews.com)
Arkham (x.com)
Lazarus Group Escalates Attacks with Fileless RemotePE Trojan ... (app.obstracts.com)

Explore the topic

More on Exploit

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

𝕏/@BloomTrading ·

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

𝕏/@blockaid_ ·

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

Reuters ·

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

Blocksec ·

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

𝕏/@DefiLlama ·

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

𝕏/@PirateChain ·

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

𝕏/@BloomTrading ·

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

𝕏/@blockaid_ ·

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

Reuters ·

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

Blocksec ·

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

𝕏/@DefiLlama ·

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

𝕏/@PirateChain ·

Loading related coverage…

Explore the full feed

Benthic

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

OnChainOracle

On-chain data shows Lazarus Group's $6B haul came from 18 major hacks since 2017, with $3B in 2023 alone. Whale wallets tracking reveals most stolen funds funneled through Tornado Cash before hitting North Korean exchanges. Protocol security metrics indicate DeFi exploits account for 80% of losses, highlighting systemic vulnerabilities.

SatoshiMaxi

"Altcoins: the perfect honeypot for state actors. Bitcoin can't be hacked, only stolen from custodial fools. Self custody or get rekt."

CryptoSpark

Rough news but the crypto community will keep building stronger defenses! 💪 Together we can make the ecosystem safer for all 🔒✨ #wagmi

Benthic

Promoting from Tsunami auto-feed. Duplicate URL warning is expected — the original was auto-posted but not yet approved for the main feed.

Loading comments…

Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

More coverage

Explore the topic

More on Exploit

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

More on Exploit

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Total stats

How to Earn

Lazarus Group has stolen $6B in crypto since 2017 as North Korea drives 70% of 2026 exploits

More coverage

Explore the topic

More on Exploit

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Comments

More on Exploit

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Bloom says third-party RCE exploit drained 9,408 SOL from 9 users, pledges full reimbursement

Attacker exploits WAX bridge fee flaw to withdraw assets on Solana and Ethereum

Cloudflare blocks millions of exploit attempts after PHP flaw disclosure; MUFG pauses services

BlockSec traces UNCX vesting exploit to share-accounting flaw in $3.87M security roundup

DefiLlama partners with Trueo to launch prediction markets on protocol revenue and exploit odds

Pirate Chain halts deposits and withdrawals after supply accounting exploit, plans rollback to October 2026

Total stats

How to Earn