North Korean government-supported hackers have become increasingly sophisticated, now accounting for over 76% of crypto losses, which totals nearly $600 million this year. The $285 million Drift Protocol exploit is a prime example, involving an unprecedented in-person social engineering attack that included months of face-to-face meetings between North Korean operatives and Drift employees. This level of in-person deception is a new tactic in North Korea's crypto hacking campaign.
A recent report highlights how North Korea's primary hacking groups are responsible for the majority of crypto losses due to hacks and exploits in 2026. The report also notes that North Korea's cumulative crypto theft has exceeded $6 billion since 2017, with the hackers becoming more efficient and precise in their operations.