Post
Parent event 01
X conversation update
1 related posts from @blckchaindaily
Related posts@blckchaindaily
Back to narratives
SecurityActive
Conversation intelligence
North Korea-linked hackers stole $643M in crypto in H1 2026, 66% of global losses
North Korean hackers stole $643 million in cryptocurrency during the first half of 2026, representing 66% of all global crypto hack losses, according to TRM Labs. Two DeFi exploits in April alone netted $577 million from Drift Protocol and KelpDAO.
Heat
85
Confidence
95%
Evidence
6
Updated
Why It Happened
State-sponsored hacking groups affiliated with North Korea used AI-assisted social engineering and sophisticated exploits against audited DeFi protocols, overwhelming security measures and laundering stolen funds through THORChain.
Outcome So Far
Funds partially frozen ($75M on Arbitrum); majority laundered to Bitcoin via THORChain. Protocols are investigating, but no broader recovery reported. TRM Labs report published July 3, 2026.
Actors
Timeline order
Post
Post
Parent event 02
X conversation update
3 related posts from @BullishTimes_, @MarioNawfal, @realTuckFrumper
Related posts@BullishTimes_@MarioNawfal@realTuckFrumper
Post
Parent event 03
TRM Labs H1 2026 report published
TRM Labs issues report revealing North Korean hackers stole $643M in H1 2026, 66% of all crypto hack losses. Two April DeFi heists accounted for $577M. Total number of hacks hit 207, but average loss per hack dropped.
Related posts@thisisksa
Post
Parent event 04
Drift Protocol hack
North Korean hackers exploited Drift Protocol, stealing $285 million after weeks of social engineering and staging trades. The actual drain took 12 minutes.
Related posts@Rifat_EE
Post
Parent event 05
KelpDAO hack
North Korean hackers exploited a LayerZero bridge flaw in KelpDAO, stealing $292 million. $75M frozen on Arbitrum, the rest laundered through THORChain to Bitcoin.
Related posts@Rifat_EE