North Korean hackers represent one of the most serious cybersecurity threats in the digital asset space. New methods they employ raise concerns among crypto firms.
Financial Flows to North Korean IT Workers
According to crypto investigator ZachXBT, since the beginning of 2025, crypto firms have paid over $16.58 million to North Korean IT workers. With monthly payouts around $2.76 million, this suggests a minimum of 345 employees linked to North Korean operatives.
Challenges in Identifying Threats
There are significant difficulties in identifying these employees as many of them show red flags, such as discrepancies in IP addresses and frequently changing GitHub usernames. For example, one IT worker was spotted at an event in Russia among a group of North Koreans.
Insider Attacks in the Crypto Industry
North Korean operatives are not just freelancing but are involved in insider attacks, using their roles to gain access to projects. This allows them to execute hacks or rug pulls, making them particularly dangerous to the crypto industry.
In light of these threats, crypto firms should remain particularly vigilant regarding the potential risks associated with North Korean hackers. Strengthening preventive measures against such incidents is essential.
