Crypto losses from North Korea hackers up 51% in 2025: report

North Korean hackers consistently target Ethereum-based protocols because of the chain's deep liquidity and high total value locked. Stolen ETH or ERC-20 tokens are typically swapped for Bitcoin or stablecoins, creating concentrated sell pressure on those pairs. Wrapped Bitcoin on alternative chains can depeg instantly if the underlying bridge is drained. DeFi tokens with smaller market caps and thinner liquidity are especially vulnerable; a single large dump can cascade through lending protocols and trigger liquidations. The 51% jump suggests that the industry's security spending is not keeping pace with the attackers' sophistication, leaving these assets exposed to event-driven repricing.

Laundering Speed Dictates the Liquidity Shock

The market impact of a hack depends heavily on the laundering timeline. When hackers use instant swappers or mixers to move funds within minutes, the resulting sell pressure hits all at once. When they sit on stolen assets for weeks, the overhang creates persistent uncertainty. On-chain monitoring by analytics firms often provides the first warning of an impending dump. Whale alerts tied to known hacker wallets can precede sharp price moves by hours. For traders, the practical takeaway is that monitoring these flows is now as important as watching exchange order books. The 51% increase in losses means more stolen funds are entering the laundering pipeline, and the speed of that pipeline determines whether the market absorbs the selling or suffers a cascade.

The 51% rise is a signal that the industry is not winning the security battle. The next major hack could test exchange solvency and trigger regulatory crackdowns on privacy tools. Traders should monitor exchange proof-of-reserves and insurance fund balances, particularly for venues that have been slow to publish attestations. Any new sanctions on mixers or privacy coins would directly impact assets like Monero or Tornado Cash-linked tokens. The T3 unit's recent $450 million freeze shows that law enforcement is getting faster, yet the 51% jump in losses suggests the hackers are still ahead. For traders, the next heist–not the next Fed meeting–may be the real volatility catalyst. Pricing in higher tail risk for exchange tokens and DeFi assets is no longer optional.