U.S. Treasury Freezes Crypto Network Feeding Nearly $800 Million To North Korea's Weapons Programs

On March 12, 2026 the U.S. Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions targeting a network that converted nearly $800 million into cryptocurrency for North Korea in 2024, blacklisting six individuals and two entities tied to the scheme and freezing related crypto addresses.

“The US Treasury has sanctioned six individuals and two entities tied to a North Korean scheme that used remote IT work and cryptocurrency to raise nearly $800 million in 2024”

BanklessTimes

The action was described by multiple outlets as an effort to shut down a fraud network that used remote IT jobs to generate revenue for Pyongyang’s weapons programs, with officials saying the designations block property and bar most dealings by U.S. persons.

BanklessTimes

U.S. officials and reporting say the network relied on placing North Korean IT operatives in overseas remote jobs using stolen identities, fake documents and front firms; those workers often funneled wages back to the regime, sometimes installing malware to steal data or extort companies.

Treasury and analytics firms noted the operation then converted earnings into crypto and laundered funds through a mix of centralized exchanges, hosted wallets, DeFi services and cross-chain bridges to obscure flows.

Blockonomi

OFAC’s designations named specific facilitators and added 21 wallet addresses across multiple blockchains; reporting identified Vietnam-based Nguyen Quang Viet as a convertor of roughly $2.5 million into crypto for DPRK-linked clients and flagged Amnokgang Technology Development Company and individuals such as Yun Song Guk, Sim Hyon Sop and Hoang Minh Quang with multiple addresses across Ethereum, Tron and Bitcoin.

Officials and analysts placed this enforcement action in a larger cyber-financial context: a UN-linked report and Chainalysis data cited by multiple outlets say North Korea’s crypto-related thefts and fraud exceeded $2 billion and affected dozens of countries, with incidents such as the February 2025 Bybit breach (near $1.5 billion) and rapidly rising DPRK-linked hacker activity driving urgent calls for tougher AML and sanctions enforcement.

Treasury statements and reporting stressed the legal and practical bite of the measures: designated assets are frozen in U.S. jurisdiction, U.S. persons are barred from dealings, foreign banks risk secondary sanctions, and violations can carry civil or criminal penalties—measures intended to choke the flow of revenue to Pyongyang and deter intermediaries across borders.