North Korea's Lazarus Group Exploits Crypto Gaps, $6.75 Billion Stolen

In 2025 and the first half of 2026, North Korea's Lazarus Group has been a major threat in the cryptocurrency sector, responsible for approximately $6.75 billion in theft. The group has exploited vulnerabilities in the crypto ecosystem, with significant attacks including the $1.5 billion hack of Bybit in February 2025 and a series of high-profile incidents in 2026, such as the $285 million theft from Drift Protocol. The total losses from crypto hacks in 2025 reached over $3.4 billion, with personal wallet compromises rising dramatically. In response, Senator Cynthia Lummis has introduced the CLARITY Act, aimed at closing regulatory gaps that allow such illicit activities. The Act would empower the U.S. Treasury to freeze suspicious transactions and impose sanctions on foreign digital asset firms. Critics argue that the legislation may inadvertently create loopholes for sanctions evasion. The ongoing threat from North Korean hackers continues to pose significant risks to the cryptocurrency industry.

Key Points: • Lazarus Group linked to $6.75 billion in crypto theft since 2019. • The CLARITY Act aims to enhance regulatory measures against crypto-related illicit finance. • North Korea's hackers were responsible for two-thirds of global crypto hacking losses in early 2026.