Washington, Seoul and Tokyo Deepen Push Against North Korean Crypto Theft

Washington, Seoul and Tokyo Deepen Push Against North Korean Crypto Theft

June 29, 2026
By Mintesinot Nigussie

The United States, Japan and South Korea agreed to intensify joint efforts to combat North Korea's cryptocurrency theft, cyber attacks and illicit information technology worker schemes, as the three allies seek to cut off a key source of funding for Pyongyang's weapons programmes.

Officials from the three countries met in Washington on June 25 and 26 for the Trilateral Diplomatic Working Group on DPRK Cyber Threats, where they coordinated responses to North Korea's cyber operations and reaffirmed their commitment to the complete denuclearisation of the country.

The delegations said disrupting illicit revenue streams remained central to preventing North Korea from financing activities prohibited under international sanctions, including the development of nuclear weapons and ballistic missiles.

Participants expressed concern over a series of cryptocurrency thefts attributed to North Korean actors, citing reported attacks that stole 290 million US dollars from KelpDAO and 285 million US dollars from Drift Protocol. They agreed to strengthen cooperation to expose cryptocurrency theft networks and expand international awareness of the threat, particularly in Europe, Southeast Asia and Africa.

The three governments also warned that North Korean information technology workers are increasingly using artificial intelligence to disguise their identities and secure employment with overseas companies, allowing them to generate revenue for the regime. Officials pledged to support efforts by private companies to improve the detection and prevention of such schemes.

The meeting reaffirmed the importance of closer law enforcement cooperation to strengthen enforcement of international sanctions and disrupt North Korea's cyber operations and illicit financial networks.

Representatives also highlighted the role of the private sector in countering cyber threats. Officials thanked Coinbase, Mandiant Threat Intelligence, part of Google Cloud Security, Polymarket and Upwork for participating in the inaugural private sector session of the trilateral working group, describing industry cooperation as an important element in identifying and responding to evolving cyber risks linked to North Korea.

Source: FSX Business News