The United States government is now involving vetted private companies in efforts to combat North Korean digital asset theft. This initiative marks a strategic shift, as the responsibility for countering these activities previously rested primarily with federal agencies like the FBI, the Department of Justice, and the Treasury’s Office of Foreign Assets Control.
According to Chainalysis, North Korean actors stole over $2 billion in digital assets in 2025, with the Bybit breach alone accounting for approximately $1.5 billion. Authorities are targeting groups such as Lazarus Group and APT38, which are linked to large-scale heists and fraudulent IT worker schemes used to fund weapons programs.
In mid-October 2026, the Department of Justice conducted Operation Lonestar Roundup in Ohio and Texas, resulting in over 70 indictments and arrests. Officials seized about 187 computers from so-called laptop farms, which were used to generate approximately $3 million for North Korean interests by masking the location of overseas workers.
To enhance detection, the US is utilizing the Crypto-ISAC for industry-wide threat intelligence sharing, with private partners like CrowdStrike involved in the effort. Since 2023, authorities have sought the forfeiture of over $15 million in stablecoins linked to APT38 activities, as stablecoins remain a primary tool for moving stolen funds.
The government is increasing pressure on crypto exchanges and stablecoin issuers to implement more rigorous transaction vetting processes. As enforcement tightens, these service providers face higher compliance standards to mitigate the risk of legal repercussions associated with money laundering.
