South Korean authorities have officially identified North Korean hackers because the perpetrators of a serious Ethereum heist in 2019, marking a major breakthrough within the investigation.
The stolen cryptocurrency, valued at 58 billion won (roughly $55.7 million) on the time, was traced to North Korea’s Reconnaissance General Bureau, a military intelligence agency. The hackers reportedly infiltrated a South Korea-based exchange to execute the theft.
Detailing the Hack and the Coordinated Efforts Behind Uncovering the Perpetrators
The National Police Agency revealed that the attackers stole 342,000 Ethereum tokens, now valued at over 1.4 trillion won (roughly $1.05 billion), making this one of the notable crypto thefts on record.
While the particular exchange targeted was not disclosed, Upbit, a number one South Korean exchange, had reported a similar loss in Ethereum to an unidentified wallet in 2019.
The hackers laundered over half of the stolen funds through three self-operated crypto exchanges, offering discounts to convert the assets into Bitcoin. The remaining Ethereum was dispersed across 51 other exchanges globally.
In line with the report, the investigation involved cooperation between South Korean authorities and the US Federal Bureau of Investigation (FBI), which used advanced techniques to trace Web Protocol (IP) addresses and the movement of stolen assets.
This marks the primary time South Korea has definitively linked a crypto exchange cyberattack to North Korea. Local media outlets attributed the operation to the notorious Lazarus and Andariel hacker groups, each tied to North Korea’s Reconnaissance General Bureau.
Hackers Persistent Threat To The Crypto Industry
Notably, this shouldn’t be the primary time North Korean hackers have been linked to the perpetrators behind significant hacking incidents. Over the past years, this group has gained notoriety for targeting cryptocurrency exchanges and financial platforms to fund their country’s operations.
While authorities do make efforts to recuperate stolen funds from these notorious hackers, they continue to be a persistent threat to the crypto industry. Recently, the United Nations flagged North Korea’s involvement in quite a few cyberattacks on cryptocurrency platforms.
In line with a UN panel report from May, the regime is suspected of orchestrating roughly 97 crypto hacks between 2017 and 2024, collectively valued at $3.6 billion.
These activities are believed to play a serious role in funding North Korea’s missile and nuclear programs, highlighting the broader geopolitical implications of those crimes.
Despite the coordinated efforts of authorities and platforms to curb the attacks from these hackers, they’ve been quite resilient. Just last month, this same hacking group stole roughly $3 billion price of cryptocurrency from users by “devising a fake blockchain game.”
In line with reports, the operation that led to this huge sum of theft was conducted by the North Korean hackers inside six years, from 2016 to 2022.
Featured image created with DALL-E, Chart from TradingView