According to reports from the Korean News Agency, South Korean police have confirmed for the first time that the theft of 342 thousand Ethereum from the cryptocurrency exchange Upbit in 2019 was carried out by the North Korean reconnaissance agency's hacker organizations "Lazarus" and "Andariel." The police reached this conclusion through evidence obtained from North Korean IP addresses, the flow of crypto assets, and collaboration with the FBI. Among the stolen Ethereum, 57% was exchanged for Bitcoin at low prices, while the remaining assets were laundered through 51 overseas exchanges. After four years of tracking, the police successfully recovered 4.8 Bitcoin (approximately 600 million Korean Won) from a Swiss exchange and returned it to Upbit.

According to reports from the Korea Herald, South Korean police have confirmed for the first time that the 342,000 Ethereum stolen from the cryptocurrency exchange Upbit in 2019 was the work of the North Korean Reconnaissance General Bureau's hacker groups "Lazarus" and "Andariel." The police reached this conclusion through evidence obtained via North Korean IP addresses, the flow of encrypted assets, and collaboration with the FBI. Of the stolen Ethereum, 57% was exchanged for Bitcoin at low prices, while the remaining assets were laundered through 51 overseas exchanges. After four years of tracking, the police successfully recovered 4.8 Bitcoin (approximately 600 million KRW) from a Swiss exchange and returned it to Upbit.

South Korean police have confirmed for the first time that the hacker who stole 342,000 ETH from Upbit five years ago is from North Korea.