North Korean-Linked Crypto Theft Tops $11.8B

| panewslab.com
North Korean-linked crypto theft has been tied to 37 incidents from 2017 to 2026, with estimated losses of about $11.8 billion, according to the earlier report. A later review of 12 major cases from 2022 to 2026 put losses at about $9.74 billion, using valuations at the time of each incident and covering only selected cases. The figures reflect different scopes rather than a clear change in the overall estimate. The later review counted roughly $6.3 billion in losses tied to Binance—about 65% of its selected-case total—and cited major incidents involving Bybit ($1.5 billion), Ronin/Axie Infinity ($620 million), Bitget ($388 million), DMM Bitcoin ($308 million), WazirX ($235 million), Harmony Horizon ($100 million) and Atomic Wallet ($100 million). US authorities attributed the Binance, Bybit and DMM Bitcoin incidents to the TraderTraitor group; most of the other cases were linked to the Lazarus network. The earlier report also described a Binance hot-wallet breach affecting nine chains and more than $6.26 billion in transfers, as well as social engineering, compromised devices, insider access and the alleged use of false identities and AI-assisted tools. For traders, the reports underline persistent crypto exchange and wallet security risks. Further disclosures or evidence of compromised infrastructure could weigh on exchange-linked tokens and market sentiment, although the figures alone do not establish losses for any specific token. Traders may monitor exchange statements, security measures and related on-chain activity.
Bearish
The reports describe large-scale theft involving major exchanges and crypto infrastructure, which can undermine confidence in exchange security and raise concerns about counterparty risk. In the short term, fresh disclosures or evidence of a breach could prompt risk aversion and selling in exchange-linked tokens, including BNB, as traders reassess platform exposure. However, the summaries do not establish that BNB itself was stolen or that the reported losses directly affect its supply or fundamentals, so any token-specific price reaction may be limited or temporary. Over the longer term, stronger custody controls, audits and incident response could improve confidence, while repeated attacks or weak security practices could sustain a risk discount. The reports alone do not confirm an ongoing market-wide disruption.