| 2017-12 | Youbit | Korea, Republic of | Bluenoroff |
| mid-2018 (learned of hack in late 2018) | Hack of The Exchange 1 via malware downloaded by an employee communicating with a "potential client" (Celas Trade Pro / Fallchill) | South Korea (three of the four exchanges were based in South Korea) | North Korean co-conspirators |
| in or about the summer of 2018 | Theft from The Exchange 4, a South Korea-based virtual currency exchange | South Korea | North Korean co-conspirators |
| Between in or about 2018 through in or about April 2019 | Laundering of Exchange 1 and Exchange 2 hack proceeds by Tian Yinyin and Li Jiadong | China (Chinese OTC traders) | Tian Yinyin; Li Jiadong; North Korean co-conspirators |
| 2019-11 | Upbit | Korea, Republic of | |
| 28 May 2019 | UpBit attacked. No losses reported. | ROK | Suspected DPRK (annex title) |