US Government Engages Private Firms to Combat North Korean Crypto Theft

The US government has authorized vetted private firms to engage in efforts to combat North Korean crypto theft, a notable shift from traditional law enforcement approaches that primarily involved prosecutors and federal agents. This decision comes as North Korean actors are estimated to have stolen over $2 billion in digital assets, with significant incidents like the Bybit breach accounting for approximately $1.5 billion of that total.

This new strategy follows aggressive enforcement actions by the Department of Justice, the FBI, and the Treasury’s Office of Foreign Assets Control (OFAC), targeting state-linked hacking groups such as the Lazarus Group and APT38. These groups have been implicated in various financial crimes, including large-scale digital asset thefts and fraudulent employment schemes that fund North Korea's weapons programs.

In mid-October 2026, the DOJ executed Operation Lonestar Roundup, resulting in over 70 indictments and the seizure of approximately 187 computers linked to suspected “laptop farms.” These operations reportedly generated around $3 million for North Korean interests by employing overseas workers under false identities.

The role of stablecoins in laundering stolen funds has drawn particular scrutiny, with US authorities seeking the forfeiture of over $15 million linked to APT38 since 2023. The collaboration between public and private sectors is expected to enhance compliance measures for crypto exchanges and service providers, necessitating robust vetting processes to mitigate legal risks.

As the US deepens its partnership with the private sector through initiatives like the Crypto-ISAC, the compliance landscape for crypto firms is evolving, with increased pressure on stablecoin issuers due to their prominent role in illicit activities.