Foresiet links several early-2025 cryptocurrency theft and laundering events to a broader pattern of DPRK-linked crypto operations, while noting that responsibility for the Bybit outflow was not yet confirmed. The DPRK-relevant evidence includes a suspected North Korean attempt to move 46.3K XRP from stolen funds that failed because the actors omitted the exchange destination tag. The Bybit incident involved a $1.46 billion suspicious outflow of mETH and stETH that was rapidly swapped into ETH, split across 39 wallets, and routed through decentralized exchanges, bridges, and instant exchanges. The report matters for exchange and blockchain defenders because the described laundering patterns align with tactics used to delay freezes and obscure stolen-fund tracing across chains.