North Korea’s Lazarus Hacks BitoPro for $11.5 Million

In June 2025, the Lazarus Group, a prolific North Korean hacking collective, attacked BitoPro Exchange, resulting in $11.5 million in losses. The incident reflects ongoing vulnerabilities within cryptocurrency platforms and emphasizes the group’s persistent threat.

“The methodology observed during the breach strongly resembles known Lazarus Group activity… We are working closely with law enforcement and blockchain security experts to recover stolen assets and prevent further incidents.” – BitoPro Exchange Team, source

Lazarus Group’s attack underscores its tactics of exploiting centralized exchanges, impacting the digital asset ecosystem. Such breaches often lead exchanges to tighten security, affecting liquidity and prompting regulatory scrutiny.

The North Korean state-backed Lazarus Group executed a sophisticated breach targeting BitoPro Exchange in June 2025, extracting $11.5 million. The exchange responded by collaborating with law enforcement to mitigate damage and recover funds. The group is known for targeting financial infrastructures with similar high-value breaches in the past, employing advanced malware and vulnerabilities. Additionally, the attack triggered discussions among crypto exchanges to enhance security measures. The theft, involving Bitcoin and Ethereum, disrupted some market activities, emphasizing the group’s impact on the broader cryptocurrency sector. Exchanges have increasingly invested in monitoring tools and audits to address security threats. Historical data points to Lazarus’s successful laundering of over $900 million annually, making it a significant concern for regulators. Increased regulatory measures include wallet blacklisting and cooperation with international agencies to curb such attacks. The ongoing threat from Lazarus may lead to heightened technological innovations in cybersecurity within the industry as platforms seek to safeguard assets.