Evidence from credible sources supports the statement as accurate. Learn more in Methodology.
Confirm that the MSMT or associated sources document a $400 million increase in cryptocurrency thefts in the three months after the report and that 2025 crypto thefts exceed $2 billion.
Analyses of the Multilateral Sanctions Monitoring Team (MSMT) report indicate that DPRK-linked actors had stolen roughly $1.6–1.65 billion in cryptocurrency from January through September 2025, as part of about $2.8 billion taken between January 2024 and September 2025. Subsequent blockchain forensics by Chainalysis found that North Korea-linked hackers stole at least $2.02 billion in cryptocurrency during 2025 alone, based on data through early December. The difference between the MSMT’s January–September 2025 estimate ($1.6–1.65 billion) and Chainalysis’s full‑year 2025 figure ($2.02 billion) implies additional thefts on the order of $350–400 million in the final quarter of 2025. Independent reporting from Yonhap and cybersecurity researchers corroborates both the MSMT baselines and the ≥$2 billion annual total derived from Chainalysis. Verdict: True, because convergent estimates from MSMT-based analyses and independent blockchain forensics support that DPRK actors stole more than $2 billion in crypto in 2025 and that roughly $400 million of this was added after the MSMT report’s cutoff, matching the statement’s magnitude and timing.