North Korean (military) clandestine hacker group Lazarus broke into ByBit crypto exchange and stole a reported 1.4 billion USD. Claims range between 1 and 2 billion stolen.
The second highest heist I’d heard of was 600 million.
Money acquired by the group and other clandestine offices (office 39 etc) made expressly for creating revenue through black-market sources supposedly goes into a general fund to keep the Kim family living a lavish life, while the people of NK struggle to survive daily. I would guess some of that also goes to his top officials to keep them loyal.