FBI Links North Korea to $1.5B Bybit Hack, Flags Crypto Addresses
The FBI has confirmed North Korea orchestrated a massive crypto heist and is urging the DeFi community to block specific Bitcoin, Ethereum, and Solana addresses.
The FBI has officially pinned one of the largest crypto thefts in history on North Korea, calling out the rogue state's elite hacking units for executing a brazen attack on a major crypto exchange. The bureau is now asking the decentralized finance community to step up and help choke off the stolen funds before they can be laundered further.
At the center of the operation are specific Bitcoin, Ethereum, and Solana wallet addresses that the FBI has publicly flagged. If you run a DeFi protocol, a bridge, or any on-chain service, the message is simple: block these addresses now. The feds are treating this as an active money-movement threat, not a cold case.
Read more Impinj Issues Q4 2026 Earnings Guidance: What to Know →
North Korean state-sponsored hackers — most commonly associated with groups like Lazarus — have become the single most dangerous threat actor in the crypto space. They don't just steal; they run sophisticated multi-step laundering operations that can stretch across chains, mixers, and OTC desks over months. Time is always the enemy when it comes to tracing these funds.
For retail traders, the immediate impact may feel distant, but it isn't. Stolen funds moving through DeFi can distort liquidity, trigger compliance crackdowns, and put the entire ecosystem under a regulatory microscope. Every time a state-backed actor cleans money through a DEX or bridge, regulators use it as ammunition against the whole industry.
The FBI's public appeal to the DeFi community signals something important: on-chain transparency is now a law enforcement tool, and decentralized protocols are being treated as participants in the financial system whether they like it or not. Continue reading at CoinDesk.
