G7 Condemns North Korea’s Crypto Heists as a Global Security Threat

Silhouetted figure monitoring cryptocurrency transaction maps on screens in a dark command center.

In a formal statement issued on March 20, 2025, the Group of Seven (G7) nations declared that North Korea’s systematic theft of cryptocurrency represents a global security threat, vowing to intensify efforts to disrupt the illicit funding stream that fuels Pyongyang’s weapons programs.

The G7 has formally labeled North Korea’s large-scale cryptocurrency thefts a global security threat, citing the funds’ use to finance its banned weapons programs. The statement follows a series of major hacks attributed to North Korean state-sponsored groups, including the theft of over $1.5 billion from the Bybit exchange in February 2025. The designation aims to coordinate international efforts to disrupt these cyber operations and recover stolen assets.

The declaration, released after a meeting of G7 foreign ministers in Quebec, Canada, explicitly links the Democratic People’s Republic of Korea (DPRK) to a string of high-profile cyber heists. The ministers stated that the proceeds from these thefts are directly funneled into North Korea’s illicit nuclear and ballistic missile programs, violating multiple United Nations Security Council resolutions.

Also read: Moody's Puts Credit Ratings on Solana for the First Time via Alphaledger

Billions Stolen, Weapons Funded

The G7’s condemnation comes amid a surge in cyberattacks attributed to North Korean state-sponsored hacking groups, such as Lazarus Group and BlueNoroff. According to a 2024 United Nations report, North Korean cyber actors stole an estimated $3 billion in cryptocurrency between 2017 and 2023. The pace has only accelerated, with the February 2025 theft of approximately $1.5 billion in Ethereum from the Dubai-based Bybit exchange standing as the single largest crypto heist in history, as reported by Reuters.

Blockchain analytics firm Chainalysis has tracked these stolen funds as they are laundered through complex networks of mixers, cross-chain bridges, and over-the-counter brokers, eventually being converted into fiat currency or used to purchase goods for the regime.

Also read: Pi Network Ecosystem Grows With GalaxyPi Platform Launch

Coordinated International Response

The G7 statement signals a more coordinated approach to counter this threat. The group called for enhanced information sharing among member states, closer cooperation with private sector cryptocurrency exchanges and blockchain analytics firms, and the application of targeted sanctions against entities and individuals facilitating the laundering of stolen crypto assets.

“These are not victimless crimes,” the G7 statement read. “The proceeds of these thefts directly underwrite the DPRK’s ability to threaten international peace and security. We are committed to using all available tools to disrupt this cycle.” The statement also urged other nations, particularly those hosting large cryptocurrency exchanges, to adopt stricter anti-money laundering and know-your-customer (KYC) regulations to prevent stolen funds from being cashed out.

Implications for the Crypto Industry

The G7’s designation carries significant implications for the cryptocurrency industry. It places increased pressure on exchanges and decentralized finance (DeFi) protocols to harden their security and compliance measures. The statement may also accelerate the development and adoption of regulatory frameworks, such as the European Union’s Markets in Crypto-Assets (MiCA) regulation, which imposes stringent requirements on crypto service providers to prevent illicit finance.

For individual investors, the news underscores the systemic risk posed by state-sponsored hacking. The G7’s focus on the issue could lead to greater market volatility in the short term, but may also develop a more secure and trustworthy ecosystem over the long term as security standards improve.

Frequently Asked Questions

What specific crypto thefts is the G7 referring to?

The G7 statement references a pattern of thefts attributed to North Korean state-sponsored hackers, including the $1.5 billion Bybit hack in February 2025, the $600 million Axie Infinity hack in 2022, and numerous other smaller attacks on exchanges and DeFi protocols.

How does North Korea use stolen cryptocurrency?

Stolen cryptocurrency is laundered through a complex series of transactions and eventually converted into fiat currency or used to purchase goods and services that support North Korea’s weapons programs, including raw materials for missiles and nuclear components.

What can the average crypto investor do to stay safe?

Investors should use reputable exchanges with strong security and compliance measures, enable two-factor authentication, consider using hardware wallets for long-term storage, and stay informed about known hacking groups and their tactics.

Zoi Dimitriou

Written by

Zoi Dimitriou

Zoi Dimitriou is a cryptocurrency analyst and senior writer at CryptoNewsInsights, specializing in DeFi protocol analysis, Ethereum ecosystem developments, and cross-chain bridge security. With seven years of experience in blockchain journalism and a background in applied mathematics, Zoi combines technical depth with accessible writing to help readers understand complex decentralized finance concepts. She covers yield farming strategies, liquidity pool dynamics, governance token economics, and smart contract audit findings with a focus on risk assessment and investor education.

Leave a Reply

Your email address will not be published. Required fields are marked *