The nuclear double standard we don’t talk about

ABOUT THE AUTHOR: Michael Hershman, a former military intelligence officer, is president of the Fairfax Group.

When Iran enriches uranium past a certain threshold, Washington goes into crisis mode. Senators demand action. The Pentagon moves carrier groups. Commentators debate whether we’re weeks away from war. The machinery of American foreign policy lurches into high gear.

Meanwhile, North Korea — an actual nuclear-armed state — steals billions of dollars from American institutions, cripples hospitals with ransomware, embeds covert operatives inside Western technology companies, and prints counterfeit U.S. currency with the blessing of its government. The response from Washington? More sanctions. A few indictments that will never see a courtroom. And a kind of collective shrug.

This is not a coherent foreign policy. It is a study in strategic contradiction — and the world is watching and learning from it.

Let’s be precise about what North Korea is doing. The Lazarus Group, a hacking collective operating under the direct authority of North Korean intelligence, has stolen an estimated $3-4 billion in cryptocurrency since 2017. These are not opportunistic cybercriminals. They are state employees executing a government revenue strategy, funneling proceeds directly into the weapons program that American policy is supposedly designed to contain. In 2017, their WannaCry ransomware paralyzed hospitals, banks and government systems across 150 countries. American institutions were among the victims. In any traditional sense of the word, this was an attack.

Beyond cyber operations, North Korea runs what can only be described as a state-owned criminal enterprise. It traffics in narcotics, manufactures superdollars — counterfeit hundred-dollar bills so precise they fooled the Federal Reserve for years — and sells weapons technology to actors we spend enormous resources trying to contain. North Korean IT workers, using false identities and forged credentials, are sitting inside Western companies right now, drawing salaries that get routed back to Pyongyang. The Treasury Department knows this. The FBI knows this. It continues.

Compare this to the treatment of Iran. The United States has imposed some of the most crushing economic sanctions in modern history on Tehran. It assassinated Iran’s top military commander on foreign soil. It came to the brink of open war multiple times over the past two decades. The animating concern — legitimate, to be sure — is that Iran might acquire a nuclear weapon and what that would mean for regional stability and American allies.

But Iran does not yet have a nuclear weapon. North Korea has had one for nearly 20 years.

The standard explanation for this discrepancy goes something like this: North Korea already crossed the threshold, so the policy goal shifted from prevention to deterrence; military options against Pyongyang risk catastrophic retaliation against Seoul; and China’s patronage of the Kim Jong Un regime limits American leverage. All of this is true. None of it fully explains the tolerance for ongoing, active economic warfare against the United States.

There is something else going on, and it is worth naming plainly. North Korea figured out the equation. Acquire nuclear weapons, and the tone of American engagement fundamentally changes. The threats soften. The military options quietly come off the table. The president — any president — starts talking about summits and letters and the possibility of a deal. Whatever else Kim Jong Un has done, he has demonstrated to every authoritarian government on Earth that the fastest path to American restraint is a credible nuclear deterrent.

This is the lesson Iran is absorbing. It is the lesson every regional power with nuclear ambitions is absorbing. Prevention gets maximum pressure. Accomplishment gets managed coexistence.

There is no easy answer here. The geography of the Korean Peninsula genuinely does constrain American options in ways that the Middle East does not. A military strike on North Korea is not a serious proposal — the human cost to South Korea alone would be staggering. And cyberwar attribution, however clear to intelligence agencies, is murky enough in the public domain to make dramatic responses politically complicated.

But the current posture — treating North Korea’s ongoing criminal and cyber operations as an acceptable cost of doing business while mobilizing the full force of American policy against Iran’s potential nuclear ambitions — creates a perverse set of incentives. It tells the world that crossing the line earns you a kind of grudging immunity, while staying below it invites maximum punishment.

At some point, American foreign policy must reckon with that message. Not because there is an obvious solution, but because pretending the contradiction does not exist has its own costs. Every government watching this calculus is doing the math.

And the math is not complicated.