Crypto & Digital Assets · North Korea
Is crypto legal in North Korea? Regulation & rules (2026)
North Korea shaded by its crypto & digital assets status
North Korea publishes no domestic legal framework permitting or regulating cryptocurrency for citizens; the state's command economy and near-total internet blackout for ordinary citizens effectively prohibit private crypto activity. Paradoxically, the DPRK state apparatus covertly deploys cryptocurrency as its primary mechanism for sanctions evasion and weapons-program financing, through state-sponsored cyber-theft units (Lazarus Group, Andariel) that stole an estimated USD 2.1–2.17 billion in crypto in 2025 alone, culminating in the February 2025 USD 1.5 billion Bybit breach — the largest crypto theft on record. The UN Panel of Experts mandated to monitor DPRK sanctions had its mandate terminated in April 2024 following a Russian veto, weakening multilateral enforcement.
Key points
No publicly available DPRK statute, decree, or regulatory guidance establishes a domestic legal basis for private cryptocurrency use, exchange licensing, token issuance, or custody. Citizens lack open internet access, making a domestic retail crypto market structurally impossible.
UNSCR 1718 (2006) and successors (2270, 2321, 2371, 2375, 2397) impose asset freezes, financial-services bans, and transaction prohibitions on DPRK entities. The UN Security Council 1718 Sanctions Committee oversees implementation; the Panel of Experts that monitored compliance had its mandate lapse in April 2024 after Russia vetoed renewal.
U.S. Treasury OFAC has sanctioned Lazarus Group and subordinate units (September 2019), mixers (Blender.io 2022, Sinbad 2023) used for DPRK laundering, and as recently as March 2026 sanctioned six individuals and two entities for IT-worker crypto fraud, designating 21 cryptocurrency wallet addresses across multiple blockchains.
North Korean state-linked hackers stole USD 1.5 billion in ETH from Bybit in February 2025 (Operation TraderTraitor, per FBI attribution), the largest single crypto theft ever recorded. Total DPRK-linked theft for 2025 reached USD 2.1–2.17 billion, roughly 60% of all global crypto losses that year per CertiK and Chainalysis.
DPRK operatives systematically exploit DeFi protocols, cross-chain bridges, and crypto mixers to launder stolen assets. RUSI (March 2024) documented the use of CoinJoin and mixer services to obfuscate Lazarus Group flows; the Huione Group was found to have laundered USD 37.6 million in DPRK-linked crypto between 2021 and 2025 via unfreezable stablecoins.
Following the lapse of the UN Panel of Experts, 11 nations including the U.S., UK, South Korea, and Germany established the Multilateral Sanctions Monitoring Team (MSMT) in October 2024 to continue monitoring and publicly reporting on DPRK sanctions violations, including crypto-theft proceeds.
North Korea - other topics
Last verified 5/25/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →