The FBI attributed the March 2022 theft of $620 million in Ethereum to Lazarus Group and APT38, cyber actors associated with the DPRK. The statement links the Ronin-related cryptocurrency theft to North Korea’s broader use of cybercrime and illicit financial activity to generate revenue for the regime. It also notes continued FBI coordination with Treasury and other U.S. government partners to expose and disrupt DPRK malicious cyber activity affecting U.S. and private-sector partners.