The number of North Korean hacking groups committing crimes in the virtual asset (cryptocurrency) market is increasing.

On the 31st (local time), according to the virtual asset specialist media Cointelegraph, Paradigm warned about North Korean hacking groups by excerpting a report titled 'Dismantling the North Korean Threat'.

A new analysis has revealed that the number of North Korean hacking groups committing crimes in the virtual asset (cryptocurrency) market is increasing.

According to the virtual asset specialist media Cointelegraph on the 31st (local time), Paradigm warned about North Korean hacking groups by excerpting a report titled 'Dismantling the North Korean Threat'.

Specifically, according to the report, the existing North Korean hacking groups are Lazarus Group, Spinout, AppleJeus, Dangerous Password, and TraderTrader.

Among them, the most well-known hacking organization is Lazarus. Lazarus has committed various hacking crimes, ranging from the 2016 Sony and Bangladesh Bank incidents, the 2017 WannaCry 2.0 ransomware attack, and incidents involving Youbit, Bithumb, the 2022 Ronin Bridge, to Bybit in 2025.

Additionally, Paradigm explained that the Lazarus Group might also be behind the recent Solana meme coin scam.

According to Chainalysis's analysis released in June, North Korea, which possesses these hacking organizations, currently holds the fourth largest amount of Bitcoin (BTC) in the world. They possess approximately 13,441 Bitcoins, having secured a large amount through the recent Bybit hacking.