Bankless|11. Mai
Inside North Korea’s Crypto Heist Machine | Ari Redbord
North Korea as the Dominant Player in Crypto Crime
This transcript of a Bankless podcast featuring Ary Redboard, Global Head of Policy at TRM Labs, analyzes the growing threat of North Korean state-backed cybercrime in the crypto space.
Focus: North Korea's Systematic Attacks
- State Actors, Not "State-Sponsored": North Korea has professionalized cybercrime, compensating for its crippled economy. The average annual damage is approximately $1 billion.
- Case Study: The Drift Hack (April 2026): A unprecedented social engineering at its peak. Fake Western proxies infiltrated crypto conferences for months to gain access to a DeFi protocol. In just 12 minutes, $285 million was drained. 76% of all 2026 hack losses come from only two attacks (Drift and the m DAO).
- Total Damage: Over $6 billion stolen in the last five years, directly funding weapons proliferation and destabilizing the Korean Peninsula.
The Money Laundering Cascade
- Typical Flow: Stolen funds are moved quickly from Ethereum, bridged through to Bitcoin, and then funneled through mixers and Chinese underground money service networks (Triads) to cash out.
- Challenge: The crypto perimeter must be strengthened, especially by targeting exchanges with weak KYC.
Strategies & Defense
- The Beacon Network: An alliance of 85% of centralized crypto exchanges (Coinbase, Binance, etc.), fintechs (Stripe, PayPal), and 70 global law enforcement agencies. Illicit addresses are flagged in real-time and blocked instantly.
- Offensive Cyber Measures: A call for Cyber Letters of Marque to enable private firms to hunt down and recover stolen funds.
- Shift in Law Enforcement: Focus from arrests to asset seizure and victim restitution. Example: The largest forfeiture action in history ($15 billion) was successfully executed against the Chinese-run pig butchering ring.
Victim Compensation & Privacy
- Victim Compensation Fund: An urgent need for a central fund to compensate victims of mass scams (e.g., pig butchering). The biggest challenge is tracing individual victims.
- Privacy vs. Security: Not a trade-off but a technical solution. Zero-Knowledge Proofs can protect transactions without hiding illicit activity. An example is Privacy Pools, which prove funds are not sanctioned without revealing user identity.
- Regulatory Clarity: A clear distinction between developers who write code (“Code is not a crime”) and those conspiring with criminals. The Tornado Cash/Storm case is the central precedent.
Iran & the Future of the Fight
- Operation Economic Fury: Recent sanctions against Iran's IRGC and the Central Bank of Iran show that crypto (specifically Tether on Tron) is now a tool for US law enforcement.
- The Verdict: The cat-and-mouse game between criminals and law enforcement is intensifying. The core message is that the crypto space must unite against state actors like North Korea or risk losing user trust permanently.
