South Korean police have announced that North Korea is behind the theft of 342,000 ETH from the Upbit exchange in November 2019. This marks the first time South Korea has confirmed North Korea as an illicit actor in a cryptocurrency theft case. The police reached this conclusion by analyzing evidence including North Korean IP addresses, virtual asset flows, and the use of North Korean terminology, in collaboration with the FBI over a long-term partnership. The stolen ETH was valued at approximately 41.50 million USD at the time and has now exceeded 1 billion USD. About 57% of the stolen ETH was converted to Bitcoin, while the remainder was transferred to 51 overseas exchanges for laundering. South Korean police, in cooperation with Swiss authorities, have recovered 4.80 BTC. The FBI had previously confirmed North Korean hackers' involvement in several major cryptocurrency theft cases and warned that they are actively targeting employees in the Web3 industry.

South Korea has identified North Korea as the perpetrator behind the 342,000 ETH hack from Upbit exchange in November 2019, the country’s national police agency announced Thursday.According to the South Korean police, this is the first instance where the country has identified North Korea as the illicit actor behind a cryptocurrency heist.“[We] reached this conclusion based on a comprehensive analysis of evidence obtained through investigation, including North Korean IP addresses, flow of virtual assets, and the use of North Korean terminology, and data from our long-term collaborative effort with the Federal Bureau of Investigation (FBI)," the statement said.While the statement only referred to the exchange as 'A,' South Korean police confirmed to The Block that the victim was Upbit. The 342,000 ETH stolen in 2019 was worth approximately $41.5 million at the time. Due to the significant increase in ether’s price, the stolen tokens are now worth over $1 billion.Around 57% of the stolen ether was converted into bitcoin at a 2.5% discount via three online exchanges that appear to be established by the attacker, according to the statement. The remainder were sent across 51 overseas exchanges and then laundered.South Korean police, in collaboration with Swiss authorities, returned 4.8 BTC of the stolen funds to Upbit after it traced the cryptocurrency to a Swiss crypto exchange.FBI has previously identified North Korea-backed hackers as the attackers behind several major crypto hacks, including the $100 million hack of Harmony's Horizon bridge and the $600 million hack of Sky Mavis' Ronin Bridge. The agency warned earlier this year that North Korean cybercriminals are "aggressively targeting" employees in the Web3 industry in a persistent effort to steal cryptocurrencies.

South Korean police confirm that North Korea was behind the 2019 Upbit theft of 342,000 ETH.