North Korea Claims 76% of 2026 Crypto Hack Losses in Just Four Months

North Korean hackers accounted for 76% of all crypto hack losses by April, based on TRM Labs.

The report revealed that hackers from two distinct teams stole roughly $577 million throughout two assaults in 2026.

2 North Korean Heists Drove 76% of 2026 Crypto Hack Losses

The Drift Protocol breach and the KelpDAO bridge exploit landed in the identical month. Together, they accounted for simply 3% of this yr’s incident counts, however the bulk of the stolen worth. Notably, each these hacks are attributed to North Korean actors.

“North Korean hacking teams accounted for 76% of all crypto hack losses in 2026 by April — not as a result of North Korea launched a wave of assaults, however as a result of two assaults totaling USD 577 million dwarfed every thing else,” TRM Labs wrote.

The Drift exploit on April 1 value the Solana-based perpetual change $285 million. In a follow-up incident report, the Drift workforce famous that the assault was the end result of a six-month intelligence operation tied to North Korean actors. The fallout reached properly past Drift, impacting several protocols.

Solana yield platform Carrot was amongst them. The workforce introduced its shutdown on April 30. Carrot has set May 14 as the ultimate deadline for customers to withdraw remaining balances from Boost, Turbo, and CRT positions earlier than compelled deleveraging begins.

Follow us on X to get the most recent information because it occurs

1/ Carrot is shutting down

This is actually not the end result we needed, however the state of affairs with the Drift exploit, has confirmed to be catastrophic for our continued operations.

— Carrot (@DeFiCarrot) April 30, 2026

Meanwhile, on April 18, attackers drained 116,500 rsETH, value roughly $292 million, from KelpDAO’s cross-chain bridge. This has develop into the biggest DeFi hack thus far this yr.

Investigations instructed that the Lazarus Group’s TraderTraitor was the likely actor behind the hack. The aftermath unfold throughout the area. Aave and the broader DeFi TVL plunged sharply after the exploit.

North Korea’s Share of Crypto Theft Keeps Climbing

North Korean teams have develop into the dominant pressure in crypto theft. They drained no less than $2.02 billion in digital property during 2025 alone.

Their share of complete hack losses has risen sharply over current years. The determine sat beneath 10% in 2020 and 2021, climbed to 22% in 2022, then reached 37%, 39%, and 64% in the years that adopted. The 76% studying by April 2026 marks the very best sustained degree on report.

TRM analysts notice that the assault frequency has not elevated. Pyongyang’s high hacking groups nonetheless run a small quantity of rigorously chosen operations every year, selecting precision over quantity.

What has shifted is the “sophistication of the assaults.” TRM means that North Korean operators could also be integrating AI instruments into reconnaissance and social engineering operations.

“TRM analysts have begun to invest that North Korean operators are incorporating AI instruments…a improvement in keeping with the rising precision of assaults like Drift, which required weeks of focused manipulation of advanced blockchain mechanisms, fairly than North Korea’s conventional emphasis on easy non-public key compromises,” the report learn.

The improvement raises urgent questions on AI-driven assault capabilities and whether or not crypto protocols can hold tempo with this new threat vector.

Subscribe to our YouTube channel to look at leaders and journalists present skilled insights

The put up North Korea Claims 76% of 2026 Crypto Hack Losses in Just Four Months appeared first on BeInCrypto.