DPRK Sanctions Violations in Cyber Operations Post-UN Panel Demise

**Executive summary:** Since the UN Panel of Experts was terminated in April 2024, DPRK cyber operations have intensified into a large-scale, sophisticated criminal and espionage enterprise—responsible for record cryptocurrency thefts (notably the Feb 2025 Bybit heist), extensive laundering across blockchains, IT-worker infiltration programs that enable industrial espionage and persistent access, and operational collaboration with criminal ransomware groups—all attributed to DPRK APTs and driving funding for WMD and missile programs.