When Sanctioned Hackers Turn on Their Own: The Crack in North Korea’s Crypto Laundering Machine
(SeaPRwire) –
By: Arthur Pendelton
Global cyber governance standard-setting bodies have long struggled with sanctioned state-sponsored crypto hacking. North Korea’s latest arrest of its own state hackers lays bare a critical gap in these frameworks. For years, bodies like the FATF have pushed for unified crypto laundering rules. Isolated regimes have built parallel networks that bypass these standards entirely.
The official facts from the Daily NK report are stark. A group of former military hackers was arrested on July 12. The arrest happened at a Pyongyang safe house. They breached the Central Bank of the DPRK and Foreign Trade Bank. They diverted funds to overseas crypto wallets. They used Chinese border brokers in Sinuiju and Hyesan. They converted crypto to USD and CNY in real time. They used small transfers to avoid detection. They also used encrypted messaging apps, unregistered phones, and Chinese wireless gear. This network mirrors the ones Pyongyang uses to target foreign crypto firms. No independent outlets have verified the Daily NK’s claims as of press time.
Geopolitically, this ties directly to the growing divide between tech blocs. North Korea’s reliance on Chinese border brokers shows how sanctioned regimes can leverage neighboring states’ loose financial oversight. Chainalysis reported North Korea stole a record $2 billion in crypto in 2025. TRM Labs found they accounted for 76% of all global crypto hack and scam losses through April 2026. These numbers confirm that the laundering methods outlined in the report are part of a larger, state-sponsored global cyber crime operation.
This incident pushes the world closer to full internet balkanization. As sanctioned regimes refine their own crypto laundering networks, more nations will build isolated cyber and financial systems. Cross-border regulatory cooperation on cyber security will become all but impossible. Global crypto markets will grow more fragmented and ungoverned as a result.
Author bio: Arthur Pendelton, an expert on global internet routing architecture and technical governance boards, writing for leading international tech policy publications.