Three of the world’s largest economies just sat down in Washington to figure out how to stop one of the world’s smallest from robbing the internet blind. The US, Japan, and South Korea convened their fifth Trilateral Diplomatic Working Group on DPRK Cyber Threats on June 25-26, committing to deeper coordination against North Korea’s crypto theft operations, money laundering networks, and increasingly sophisticated AI-driven hacking campaigns.
North Korea’s hackers were responsible for 76% of all reported crypto hack losses in early 2026. Two major hacks in 2026 alone, targeting Drift Protocol and KelpDAO, netted North Korean actors $577 million combined. Since 2017, cumulative crypto thefts attributed to the DPRK now exceed $6 billion. Japan put a finer point on the scale of the problem, with reports indicating North Korea has stolen approximately 93 billion yen in crypto assets. These aren’t random smash-and-grab operations. They’re methodical, state-sponsored campaigns designed to funnel money directly into Pyongyang’s nuclear weapons and missile development programs.
The trilateral working group, which has been operational since 2023, has tracked a consistent pattern of North Korean attacks on global crypto exchanges and decentralized finance protocols. In January 2025, a joint statement from the three nations highlighted thefts totaling $308 million from DMM Bitcoin alone. Historical targeting has also included Upbit’s Solana-based assets in 2025.
