South Korean police tap Chainalysis to fight North Korea crypto theft

Chainalysis has expanded its work with the Korean National Police Agency through an agreement focused on virtual asset investigations. 

The blockchain analytics company announced the memorandum on June 9, although the parties signed it in April.

The partnership will provide training, certification and practical programs for investigators handling crypto crime. It covers fraud, laundering and cross-border theft, including attacks linked to North Korean groups.

Chainalysis expands training for Korean investigators

KNPA-designated personnel will receive Korean-language lessons through Chainalysis Academy. The material will help officers and affiliated agencies develop skills for tracing funds across wallets, exchanges, bridges and other blockchain services.

Investigators will also gain access to the Chainalysis Digital Asset Program. The certification system covers basic and advanced investigation methods, while joint exercises will use scenarios drawn from current crime patterns.

Kwon said the agreement aims to build institutional capability rather than focus only on North Korea. Chainalysis and the police will also exchange information on new technology and emerging criminal methods.

North Korean crypto theft remains a security focus

Chainalysis said North Korea-linked groups stole more than $2 billion in cryptocurrency during 2025. The company placed their total theft over the previous five years at about $5.5 billion.

The stolen assets often move through several blockchains and countries before conversion. Attackers may use exchanges, cross-chain bridges and mixing services to hide their trails, which requires investigators to follow transactions beyond South Korea.

Chainalysis said investigators need global visibility because stolen funds can cross dozens of jurisdictions before attackers attempt to cash them out through local services. The partnership aims to improve detection, disruption and prosecution across those cases.

As crypto.news reported, North Korean-linked attackers stole about $577 million from Drift Protocol and Kelp DAO in April. Those incidents renewed questions about social engineering, bridge controls and the handling of stolen funds.

South Korea strengthens its crypto crime response

The MoU follows South Korea’s creation of a police task force focused on crypto-based money laundering. The unit brings together economic crime, cybercrime, counterterrorism, narcotics and intelligence teams.

Police plan to investigate unregistered exchange operators and trace funds converted into stablecoins such as USDT. Authorities have also set aside funding for specialist training in virtual asset tracking.

Chainalysis has supported earlier Korean investigations. In one case, Seoul police tracked an international hacking group to Thailand after the group stole about $30 million, according to the company.

The new framework formalizes that cooperation. Chainalysis said its platform has supported seizures totaling more than $34 billion worldwide, while courts have accepted its data as evidence in criminal cases.

The agreement does not state how many officers will receive training or disclose the program’s budget. It also does not provide public targets for arrests, asset seizures or completed investigations.