Three North Koreans Sanctioned for Involvement in Crypto-Linked Hacking Group – Here’s What Happened

Hack North Korea
Author
Author
Ruholamin Haqshanas
About Author

Ruholamin Haqshanas is a contributing crypto writer for CryptoNews. He is a crypto and finance journalist with over four years of experience. Ruholamin has been featured in several high-profile crypto...

Last updated: 
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Source: Alexlmx/Adobe

The US Department of Foreign Asset Control (OFAC) has sanctioned three individuals that allegedly supported North Korea through illicit financing and malicious cyber activity. 

In a Monday press release, the US Treasury claimed that the three individuals provided material support to the Lazarus Group, a North Korean hacking team known for crypto thefts, to convert stolen cryptocurrency to fiat currency.

Mainland China-based virtual currency trader Wu Huihui and Hong Kong-based currency trader Cheng Hung Man were over-the-counter (OTC) traders who facilitated crypto transactions for Lazarus, per the agency. 

A third person, Sim Hyon Sop, was identified as a North Korean banker that provided other financial support.

“Today’s indictments reveal North Korea’s continued use of various means to circumvent U.S. sanctions,” U.S. Attorney for the District of Columbia Matthew Graves said in a statement. 

“We can and will ‘follow the money,’ be it through cryptocurrency or the traditional banking system, to bring appropriate charges against those who would help to fund this corrupt regime.” 

The announcement said that the North Korean government uses the crypto assets obtained by the Lazarus Group to fund its illegal nuclear program. The regime has repeatedly threatened Japan and other neighbors with nuclear weapons.

North Korea has raked in billions of dollars through cryptocurrency thefts and other schemes since at least 2017.

Earlier this year, the White House said that North Korean hackers had stolen more than $1 billion worth of crypto in the past two years, adding that Pyongyang has used the funds to support its missile program.

The US government has also claimed that the North Korean hacking group Lazarus was responsible for the hack of Axie Infinity’s Ronin blockchain that saw hackers make off with about $625 million worth of Ethereum and USDC.

However, North Korea has repeatedly denied that it seeks to hack crypto and has refuted accusations surrounding the Lazarus group, which has previously been accused of masterminding the 2014 hack of Sony Pictures and the 2017 Wannacry ransomware attacks.

North Korean Hackers Exploit DeFi and Crypto Loophloles

North Korean hacking groups, which account for a huge portion of illicit cyber activities, have been continually innovating and finding new ways to steal crypto assets and launder those funds. 

Earlier this month, the US Treasury claimed that North Korean hackers and scammers exploit loopholes in the decentralized finance (DeFi) space to launder money and hide criminal activity.

The federal agency said that North Korean hackers and other groups engaged in illicit activity have benefited from the non-compliance of some DeFi platforms with certain AML and CFT regulations.

Likewise, a recent report by cybersecurity firm Mandiant noted that Pyongyang-based hacking group APT43, also known as Kimuski, buys cloud mining services with its stolen funds to produce clean crypto with no blockchain-based connections for law enforcement to trace.

“APT43 steals and launders enough cryptocurrency to buy operational infrastructure in a manner aligned with North Korea’s juche state ideology of self-reliance,” the report claimed.

 

Logo

Why Trust Cryptonews

2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors
editors
+ 66 More

Best Crypto ICOs

Discover trending tokens still in presale — early-stage picks with potential

Explore Our Tools

Smart tools made for everyday crypto users

Market Overview

  • 7d
  • 1m
  • 1y
Market Cap
$3,311,416,623,570
-2.41
Trending Crypto

More Articles

Ethereum News
Ethereum Staking Surges Despite Market Slump, Locking Over 28% of Supply
Amin Ayan
Amin Ayan
2025-06-21 15:20:00
Bitcoin News
Will Bitcoin Survive Without Trump? Hedge Funds Aren’t Convinced, Says Semler
Amin Ayan
Amin Ayan
2025-06-21 13:15:00
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors