DPRK

Chainalysis and South Korean police have partnered to combat crypto-related crimes, including state-level threats from DPRK and scams targeting retail investors.

Thorchain has been hacked six times in five years, resulting in significant financial losses and compromised security. The hacks have occurred through different layers of the architecture, including smart contract bugs, validator software vulnerabilities, and social engineering attacks. The total loss or trapped funds amount to approximately $227 million.

Drift has outlined a recovery plan for its users after a $295 million exploit linked to DPRK. The plan aims to help users recover from the significant financial loss. The incident highlights the increasing threat of cyber attacks

Ripple will share North Korean threat intelligence with the crypto industry following two major exploits of DeFi protocols Drift and KelpDAO in April. The DPRK hackers are shifting to social engineering tactics. This move aims to enhance security measures within the crypto industry.

Cybersecurity researchers discovered a malicious npm package, '@validate-sdk/v2', used in attacks attributed to the DPRK. The package, falsely presented as a legitimate SDK, was linked to Anthropic's Claude Opus LLM and employs AI-inserted malware, fake firms, and RATs for cyber operations.

A compromised developer's repository is being used to propagate fake job scams linked to the DPRK, spreading remote access Trojans (RATs) and other malware through a worm-like infection vector. The attack method leverages malicious software to compromise systems and steal data.

North Korea was linked to over $578 million in cryptocurrency theft in April following the Kelp DAO exploit. Attacks attributed to DPRK-linked actors expanded across blockchain protocols, companies, and individual users.

The Ethereum Foundation-funded Ketman Project identified 100 North Korean IT workers involved in cryptocurrency and alerted approximately 53 projects employing DPRK operatives. The initiative aims to expose and mitigate security risks posed by North Korean cyber activities in the crypto space.

The Ethereum Foundation conducted a six-month program that identified approximately 100 North Korean IT workers infiltrating 53 cryptocurrency projects. The initiative aimed to counter cyber threats linked to the Democratic People's Republic of Korea (DPRK).

Two co-founders of Tornado Cash, a cryptocurrency mixing service, face federal charges for allegedly helping cybercriminals launder stolen crypto. They are accused of conspiring with DPRK-sponsored actors, violating U.S. sanctions, and operating an unlicensed money transmitting business.