Crypto news

19.06.2026
18:11

Cryptocurrency Analytics for Kim Jong-un: North Korea Studies Bitcoin's MVRV Index

A landmark event has occurred in the world of crypto security: the analytical platform CryptoQuant recorded a direct connection to its servers from an IP address belonging to North Korea. This visit is not a routine coincidence, but direct evidence that the top leadership of North Korea is actively using professional blockchain analytics tools to assess the market. This is not about an ordinary citizen, but a state agent with access to the global network, which in itself is a privilege given the country's total isolation.

Details of the Visit: What Exactly Was Studied in North Korea

According to data from the Amplitude system, a user from North Korea navigated to the page with the metric Bitcoin: MVRV Ratio (Market Value to Realized Value Ratio). The visit was made via the macOS operating system, transitioning from a Google search query. The single click itself does not reveal the user's identity, but the context speaks for itself. The MVRV Ratio is a complex indicator for assessing whether Bitcoin is overvalued or undervalued, used by professional traders and institutional investors. Interest from Pyongyang in this metric is a powerful signal.

Why this particular indicator? The MVRV Ratio compares the current price of an asset to the average acquisition price of all coins. A high value indicates potential overbought conditions and risk of a correction, while a low value suggests undervaluation. North Korean hackers, it seems, want to understand when it is best to lock in profits from their illegal operations and when to refrain from selling.

North Korea: A Crypto Army in Service of the Regime

This is not the first time North Korea has appeared in blockchain analysts' reports. The regime has firmly established a reputation as one of the most active players in the cybercrime market. Digital assets have become a critical economic resource for the isolated and sanctioned country. The most notorious group is the Lazarus Group, which is attributed with the largest thefts in cryptocurrency history: the withdrawal of over $600 million from the Ronin network (Axie Infinity) in 2022 and the hack of the Coincheck exchange for $534 million in 2018.

Interestingly, Pyongyang itself denies involvement in these attacks, but data from on-chain analytics and intelligence agencies from various countries relentlessly point to the contrary. The use of professional analytics is another step in the evolution of their methods: from crude hacks to strategic capital management.

Expert opinion. The fact that North Korean hackers have started tracking macro metrics like MVRV indicates the professionalization of their financial management. They are no longer just stealing — they are trying to maximize profits by analyzing market cycles. For the market, this means that periods of high liquidity and rising Bitcoin prices could be accompanied by sudden large-scale sales from North Korean "state" wallets, which could amplify volatility.