DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Truflation

Date (as written)
2024-09
Year
2024
Country
United States
Actor pages
DPRK
Tags (as written)
Cryptocurrency FinancialGain
Dollar figures (as written)
$5,125,000; 5 ($ Million); $5,600,000

Source entries (4)

lazarus.day

Truflation · 2024-09
Truflation disclosed a significant cryptocurrency incident in which the team and third parties tracked the hacker’s on-chain wallets, blacklisted affiliated accounts, and observed 1.37 million DAI exchanged for 500 ETH before transfer to the eXch exchange; the linked evidence states that user funds were not compromised.
https://lazarus.day/incidents/truflation/

tayvano/lazarus-bluenoroff-research

Truflation · 2024-09-25
Amt Stolen: $5,125,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/Truflation.md

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

TruFlation · 2024-09-25
Table 2: DPRK Cryptocurrency Thefts, January - December, 2024. Date: 2024-09-25; Victim: TruFlation; DPRK APT: DPRK (Unidentified); Amount ($ Million): 5. Report: "In coordination with Chainalysis and Mandiant, MSMT Participating States have attributed the cryptocurrency heists in tables 2 and 3 to DPRK actors."
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

SlowMist 2024 Blockchain Security and Anti-Money Laundering Annual Report, section 3.3 DPRK (table 'attributed to DPRK-affiliated groups, with data from SlowMist Hacked')

Truflation · Sep-25, 2024
The following is a chronological list of significant incidents attributed to DPRK-affiliated groups, with data from SlowMist Hacked: ... Sep-25, 2024 Truflation $5,600,000
https://www.slowmist.com/report/2024-Blockchain-Security-and-AML-Annual-Report(EN).pdf

Values found later for empty fields

actors: DPRK (Unidentified)
2024-09-25 TruFlation DPRK (Unidentified) 5
https://msmt.info/Publications/detail/MSMT%20Report/4221

Suggest a correction on GitHub