Key Takeaways:
- North Korea’s Bitcoin holdings now surpass these of El Salvador and Bhutan.
- The Lazarus Group, linked to North Korea, transformed belongings from the Bybit hack into Bitcoin.
- These cyber actions contribute to North Korea’s funding of its weapons applications.
North Korea surpassed El Salvador and Bhutan in Bitcoin (BTC) holdings after the Lazarus hacker group transformed stolen belongings from the Bybit hack into Bitcoin, according to Arkham data as of March 17.
Arkham knowledge reveals that Lazarus, answerable for the document $1.5 billion Bybit hack, transformed the stolen Ether to 13,518 Bitcoin (value $1.14 billion).
The group additionally holds practically 13,791 Ether and 5,022 Binance Coin (BNB), valued at $26.68 million and $3.16 million, respectively.
These holdings place North Korea forward of Bhutan’s 10,635 mined Bitcoin and El Salvador’s 6,118 Bitcoin.
Bitcoin Treasuries knowledge locations the US, China, the UK, and Ukraine forward, with reserves of 198,109, 190,000, 61,245, and 46,351 BTC.

The Scale of North Korean Cybercrime
North Korea’s huge wealth in cryptocurrencies stems from years of cyberattacks and crypto heists, together with the 2024 DMM Bitcoin exploit in Japan and the 2022 Ronin Network breach, the place Lazarus stole $308 million and over $600 million, respectively.
The Lazarus Group refers to a big subset of state-sponsored cyber actions of the Democratic Individuals’s Republic of Korea (DPRK), working as an integral wing of North Korea’s central overseas intelligence company, the Reconnaissance Normal Bureau (RGB).
Chainalysis’ Crypto Crime 2025 Report reveals North Korean hackers stole $660.5 million in 2023 and $1.34 billion in 2024, marking a 102.88% year-over-year improve.
One of the current examples of North Korea’s increasing cyber operations is the Bybit hack.
Bybit Assault: North Korea’s Huge Crypto Theft
The dramatic improve in North Korea’s Bitcoin holdings is instantly linked to the February 2025 assault on the Dubai-based cryptocurrency alternate Bybit.
The Lazarus Group organized the theft of over 400,000 Ether from Bybit’s safe multi-signature chilly pockets.
Following the theft, Lazarus employed sophisticated techniques to launder the stolen Ether and convert it into Bitcoin.
The group exploited decentralized finance (DeFi) protocols like THORChain, which faced criticism for missing robust anti-crime protections.
This allowed Lazarus to obscure the origins of the stolen funds and facilitate their conversion into Bitcoin.
This assault has penalties past Bybit’s monetary losses.
According to the Center for Strategic & International Studies (CSIS), proceeds from cyberattacks, together with different illicit wealth generated by North Korean-funded syndicates, fund North Korea’s nuclear missile program and pose a serious menace to worldwide safety.
The publish North Korea Surpasses El Salvador in Bitcoin Holdings, Fueled by Bybit Hack appeared first on Cryptonews.