Crypto
North Korea launders $147.5 million in stolen cryptocurrency, UN experts reveal
North Korea funnelled $147.5 million through the cryptocurrency mixer platform Tornado Cash in March, according to a confidential report by United Nations sanctions monitors reviewed by Reuters.
This illicit activity follows a hack on the HTX cryptocurrency exchange late last year, marking a major case in a broader pattern of North Korean cyber thefts targeting digital currency platforms.
The UN monitors reported to the Security Council sanctions committee that they have been investigating 97 suspected North Korean cyberattacks on cryptocurrency firms from 2017 to 2024, with total stolen funds amounting to approximately $3.6 billion.
The $147.5 million laundered in March was linked directly to the HTX exchange breach, based on data from crypto analytics firm PeckShield and blockchain research firm Elliptic.
In 2024 alone, the monitors have scrutinised 11 cryptocurrency thefts valued at $54.7 million, noting that many of these attacks might have been inadvertently facilitated by small crypto-related companies hiring North Korean IT workers.
These workers, operating abroad, reportedly generate substantial income for the isolated nation, which continues to face severe international sanctions aimed at curbing its nuclear and missile programs.
North Korea, officially known as the Democratic People’s Republic of Korea (DPRK), has been under UN sanctions since 2006.
Despite these measures, the country has continued to find ways to finance its prohibited activities, including through cybercrime and the use of virtual currency mixers like Tornado Cash.
The US sanctioned Tornado Cash in 2022 for allegedly supporting North Korean money laundering activities.
In 2023, two of its co-founders were charged with facilitating over $1 billion in illicit transactions, including for a North Korean cybercrime group.
Virtual currency mixers like Tornado Cash function by blending cryptocurrencies from various users, obscuring the origin and ownership of the funds.
This makes them attractive tools for laundering stolen cryptocurrency.
Lawyers for Tornado Cash co-founder Roman Storm, who pleaded not guilty to US charges in September, did not immediately respond to requests for comment.
The UN sanctions monitors faced a setback when their mandate expired at the end of April due to a Russian veto against its renewal.
Despite this, some monitors submitted incomplete work, including the findings on North Korea’s cryptocurrency activities, to the Security Council’s North Korea sanctions committee.
In addition to cyber theft, the UN monitors have been investigating reports of Russia releasing $9 million of North Korea’s frozen assets and allowing Pyongyang to open an account at a Russian bank in South Ossetia.
This arrangement is reportedly aimed to enhance North Korea’s access to international banking networks.
Furthermore, the monitors observed continued maritime activities suggesting ongoing arms trade between North Korea and Russia.
Ships suspected of carrying weapons have been seen travelling between North Korea’s Rajin port and Russian ports like Vladivostok and Vostochny.
China has also been implicated, with a North Korean vessel reportedly undergoing maintenance at China’s Ningbo port.
The US and its allies have accused North Korea of supplying weapons to Russia for use in the ongoing conflict in Ukraine, a charge both Moscow and Pyongyang deny.
However, both nations have committed to deepening their military cooperation.
In an additional report last month, UN monitors confirmed that debris from a missile that landed in Kharkiv, Ukraine, in January was from a North Korean Hwasong-11 series ballistic missile.
This highlights North Korea’s ongoing missile development and potential involvement in global conflicts.
North Korea’s evasion of UN sanctions continues to be a significant issue.
The monitors documented 208 voyages by North Korean cargo ships suspected of offloading coal in Chinese waters, often through ship-to-ship transfers.
Chinese Coast Guard vessels were observed in proximity to these transfers, raising questions about enforcement and compliance with international sanctions.
The Chinese mission to the UN did not immediately respond to requests for comment on these findings.
(With inputs from Reuters)
Crypto
Stablecoin Settlement Is Here, but Seamless Off-Chain Money Movement Is Not | PYMNTS.com
The stablecoin industry has spent years trying to prove one thing above all else: that blockchain-based money can move faster, cheaper and more efficiently than the financial infrastructure it hopes to replace.
Crypto
Certik Unveils ‘Anti-Virus for AI Agents’ as Skill Marketplaces Face Hidden Threats
Key Takeaways
- Certik launched a security platform to provide an “anti-virus” layer for agent ecosystems.
- Sector audits reveal high risks, but CertiK aims to protect marketplaces with 90.5% scanning precision.
- Finchip.ai is among platforms expanding integrations ahead of future consumer-facing scan updates.
The Security Challenge
Blockchain and AI security firm Certik, on May 27, unveiled a new security platform designed to evaluate risks in third-party artificial intelligence (AI) skills. Dubbed the “anti-virus for AI agents,” the release comes amid growing industry concern over the security of AI skill marketplaces.
Security researchers have warned that many of these skills are unvetted, can execute system-level actions and may contain hidden malicious behavior, creating a new software supply chain risk for the AI era. Security audits across the sector have identified risks ranging from credential harvesting and data exfiltration to fund-transfer manipulation and prompt-based override attacks.
Despite these concerns, AI skill marketplaces have expanded rapidly as agent ecosystems mature. However, unlike traditional app stores, most skills are sourced from public repositories with little or no review. Analysts say this creates opportunities for attackers to embed harmful instructions, trigger unauthorized data access or manipulate autonomous execution flows.
In a recent blog post, Certik said its skill scanner platform is designed specifically to evaluate risks that emerge during execution, including scenarios involving financial transactions or fund calls. The scanner produces a numerical score from 0 to 100, along with “pass,” “warn” or “fail” verdicts and categorized findings. According to the company, the system achieves up to 90.5% precision in identifying security risks.
“As AI agents become more deeply integrated into financial systems, enterprise workflows and everyday digital interactions, the security model around third-party skills becomes critically important,” said Ronghui Gu, Certik’s CEO and co-founder. “CertiK Skill Scanner was built to establish a standardized trust layer before execution, helping users and platforms identify hidden risks before sensitive data, assets or systems are exposed.”
Certik said AI skill marketplaces can integrate the scanner directly into publishing pipelines, automatically reviewing skills before they go live and displaying security verdicts to users. Enterprises can deploy the tool as part of internal compliance and risk-management workflows, while independent developers can use it to self-audit skills before publishing.
The company said future updates will allow everyday users to scan skills themselves before installation. The scanner has already been deployed in select Web3 AI agent infrastructure environments. Certik is also expanding integrations with additional platforms, including Finchip.ai.
“Trust is the prerequisite for any skill economy to function at scale,” said Gary Yang, incubation investor at Finchip.ai. “CertiK’s work on skill security verification is exactly what this ecosystem needs. It’s what makes Finchip’s mission of programmable skill ownership and distribution worth building.”
The launch follows Certik’s expansion into AI-focused security infrastructure. Earlier this year, the company introduced its AI Auditor initiative to address risks tied to autonomous systems and AI-driven execution environments.
“AI applications are moving toward increasingly autonomous execution, which creates a new category of security and trust challenges,” Gu said. “We believe security infrastructure for the AI era must function proactively, not reactively.”
Crypto
FBI Seizes Over $8 Billion In Cryptocurrency As Part Of The Largest Forfeiture In US Government History
The FBI seized over $8 billion in cryptocurrency, freed nearly 2,000 trafficked workers, and arrested nearly 300 people in a recent international operation.
As part of the operation, authorities shut down several “scam compounds” and crime organizations, including groups known as the Prince Group in Cambodia, Operation Sand Dollar in Dubai, and the Democratic Karen Benevolent Army in Myanmar.
“Scam compounds are modern-day criminal enterprises built to steal from Americans, launder money, and exploit trafficked workers,” FBI director Kash Patel wrote on X announcing the results of the operation.
Fox News reports that the U.S. The Democratic Karen Benevolent Army, an armed militia named after a region in Myanmar that is allegedly connected to the Chinese mob, faces sanctions imposed by the U.S. Treasury. The government has classified it as a transnational criminal organization.
Images from an operation in Thailand reveal that the FBI confiscated office supplies and thousands of smartphones.

The FBI in Dubai will extradite six of the 275 individuals they and local police detained there to the United States to face federal charges, according to the FBI. The authorities raided nine “scam compounds” in Dubai, each allegedly generating $6 million in fraud proceeds annually.
Cryptocurrency scams in the US reached a record high in 2025
In April, an FBI report revealed that cryptocurrency scams in the U.S. reached a record high in 2025, with reported losses of almost $11.4 billion. According to the FBI, cyber-enabled crimes defrauded Americans of almost $21 billion in 2025, with the costliest complaints involving cryptocurrency and artificial intelligence (AI).
“The FBI’s 2025 Internet Crime Complaint Report highlights the ever-evolving tactics of internet scammers,” the FBI’s Baltimore office wrote on X. “From fake social media profiles to voice cloning and AI-generated content, cyber criminals are evolving.”
The Internet Crime Complaint Center (IC3) received over one million complaints in 2025, up from 859,532 in 2024. The most common complaints were about investment schemes, extortion, and phishing/spoofing.
-
South-Carolina3 minutes agoTrump jumps into 2 GOP governor primaries, backing Evette in South Carolina and Feenstra in Iowa – WTOP News
-
South Dakota9 minutes agoMaternity care deserts: Where they are and how to improve
-
Tennessee15 minutes agoAnswering Tennessee Football’s Burning Questions Less Than 100 Days Until Kickoff | Rocky Top Insider
-
Texas21 minutes agoWhy are Mississippi State softball fans wearing broccoli shirts vs Texas at WCWS?
-
Utah27 minutes agoVideo: Utah startup employs those right out of prison and celebrates new milestone – KSLTV.com
-
Vermont33 minutes agoWith two major vacancies, who will lead the Vermont House and Senate? – VTDigger
-
Virginia39 minutes agoNetflix casting Central Virginia singles for “Love on the Spectrum” after Danville man joins show
-
Washington45 minutes agoAs an AI tech-hub, Washington must lead with conscience