GoCheckMyCrypto.comNorth Korea arrests hackers accused of stealing from state banks and laundering via crypto
North Korean authorities arrested former military hackers on July 12 accused of breaching the Central Bank of the DPRK and Foreign Trade Bank, diverting funds into overseas crypto wallets, and laundering proceeds through Chinese brokers. The report, sourced from Daily NK and anonymous Pyongyang sources, remains unverified by Western intelligence agencies.
North Korea's National Intelligence Agency arrested suspects at a Pyongyang safe house on July 12, accused of breaching internal systems of the Central Bank of the DPRK and Foreign Trade Bank and diverting foreign currency and state trade funds into overseas crypto wallets, according to CoinDesk reporting sourced from Daily NK and anonymous sources in Pyongyang. The report remains unverified by independent Western intelligence agencies.
According to the Daily NK sourcing, Chinese brokers converted the cryptocurrency into U.S. dollars and yuan, with contacts in the border cities of Sinuiju and Hyesan allegedly exchanging crypto for cash in real time. The group split transfers into small amounts to avoid detection, using encrypted messaging apps, unregistered phones, and Chinese wireless equipment. Officials detected the breaches through discrepancies in foreign-currency payment approvals and suspicious overseas IP activity.
The arrest signals North Korean state concern about institutional fund loss through digital assets. North Korean hackers stole a record $2 billion in cryptocurrency last year, according to Chainalysis. TRM Labs estimated North Korean operators accounted for 76 percent of crypto hack and scam losses through April 2026, per CoinDesk. A multinational sanctions-monitoring report found Chinese over-the-counter traders and financial institutions play a central role in converting crypto stolen by Pyongyang-linked operators into fiat currency.
The bear case: The report could not be independently verified. Information came from anonymous sources in Pyongyang via Daily NK, not from North Korean official statements or Western intelligence agency confirmation. The sourcing limits the certainty of the account.
North Korean state security arrested suspects for hacking domestic banks and using cryptocurrency to launder the proceeds through Chinese intermediaries.
Watch for independent Western intelligence corroboration of the arrests and the alleged theft amounts. The incident illuminates the crypto-to-fiat conversion pipeline through Chinese border intermediaries and reveals regime-level enforcement concern about unauthorized fund diversion, but confirmation would strengthen the evidentiary foundation.
And that's the way it is.
Not financial advice. Crypto Cronkite reports events and explains what they may mean. It never tells you to buy or sell anything. Do your own research.