North Korea arrests bank hacking ring over crypto claims

North Korea arrests bank hackers in a rare internal crackdown, according to Daily NK via Cointelegraph. Authorities allegedly detained former state cyber operators accused of hacking two state banks and laundering stolen funds through cryptocurrency and China-based brokers. Cointelegraph could not independently verify the report.

Key Takeaways

• Daily NK said North Korean authorities arrested former state cyber operators and IT specialists accused of hacking two state banks.
• The group allegedly breached the central bank and Foreign Trade Bank, then moved stolen funds into crypto.
• Stolen state funds were reportedly laundered through China-based brokers, per an anonymous Pyongyang source.
• If confirmed, the case would be a rare instance of North Korean cyber operators accused of targeting their own government banks.
• Cointelegraph said it could not independently verify the Daily NK report.

What are the suspects accused of doing?

According to Cointelegraph, South Korean outlet Daily NK reported that a group of former state cyber operators and IT specialists was detained over alleged bank intrusions and crypto-linked money laundering.

Daily NK cited an anonymous source in Pyongyang. The suspects allegedly hacked the internal networks of North Korea's central bank and the Foreign Trade Bank.

They then reportedly converted stolen state funds into cryptocurrency and laundered the proceeds through China-based brokers. The account remains unverified beyond Daily NK's sourcing.

Why does this matter for crypto crime watchers?

The story stands out because it points inward. Pyongyang is widely accused of directing state-backed hacking groups to steal from crypto companies to raise revenue and sidestep international sanctions.

Here, the allegation flips that narrative: former state cyber talent is accused of stealing from North Korea's own financial institutions and using crypto as a laundering rail.

For readers following Fintech & Crypto Alerts, the report underscores how digital assets can feature in both external sanctions-evasion schemes and internal diversion of state funds.

How reliable is the Daily NK reporting?

Daily NK is a Seoul-based specialist outlet that relies on a network of sources inside North Korea. Cointelegraph stressed that it could not independently confirm the arrests.

Independent verification is difficult because of North Korea's tight limits on access and information. Until more outlets or official channels corroborate the claim, the episode should be treated as a single-source report rather than settled fact.

Still, the alleged targets—the central bank and Foreign Trade Bank—and the reported crypto-to-broker laundering path are specific enough to watch for follow-up coverage across crypto security and sanctions desks.

Market desks tracking state-linked cybercrime should note the distinction. This report does not claim a fresh attack on foreign crypto firms. It claims an internal theft from North Korean banks, with crypto used afterward to move and obscure the proceeds.

That framing still matters for compliance teams. If accurate, it shows crypto rails being used inside a closed financial system, not only against overseas exchanges and protocols.