2024

United

ZachXBT

ZachXBT, a blockchain investigator, has discovered evidence of a sophisticated network of North Korean developers who earn as much as $500,000 per month by working for “established” crypto projects. 
In an Aug. 15 post on<a href="https://x.com/zachxbt/status/1824047425822310580" rel="nofollow" target="_blank"> X</a>, ZachXBT informed his over 618K followers that he believes a “single entity in Asia,” likely operating out of North Korea, is receiving $300,000 to $500,000 per month and employing at least 21 workers to contribute to over 25 crypto projects. 
ZachXBT tweets “Recently, a team reached out to me for assistance after $1.3M was stolen from the treasury after malicious code had been pushed. Unbeknownst to the team they had hired multiple DPRK IT workers as devs who were using fake identities. I then uncovered 25+ crypto projects with related devs that have been active since June 2024.” 
<figure class="wp-block-image"> 
 <figure style="width: 100%" class="wp-caption alignnone">
 <img loading="lazy" decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdkkoCbtOG7AJelL064SIMjcPN9HRV2v-4DRG5jxCqNq3ORCJ6PgysMywxIz1EJqRFNFU-dh13F1G-0wDKz23jJ5C695IYExoRmYM1IhSZ8OjDSdZW6QMJCwJAEBHCbXnfwzm9XewTdGTw8jraafKA_q6o?key=70UYmQuQ8X9u2RN8SsXRzA" alt="" width="1600" height="1191">
 <figcaption class="wp-caption-text">
 Source: Blockchain researcher ZachXBT
 </figcaption>
 </figure> 
</figure> 
ZachXBT claims that the most recent $1.3 million stolen by DPRK staff was laundered through a series of transactions, which include transferring to a theft address and culminating in 16.5 Ether being sent to two separate crypto exchanges. 
ZachXBT adds, “Using multiple payment addresses for 21 devs I was able to map out a cluster with the most recent batch of payments for ~$375K over the last month.” 
<h3 class="wp-block-heading" id="zachxbt-is-onto-north-korean-crypto-developers">ZachXBT is onto North Korean crypto developers</h3> 
Following a more thorough investigation, ZachXBT believes that these developers are only one part of a much more extensive network. He uncovered a cluster of developers who had received “$375,000 over the last month” and had previously transacted a total of $5.5 million.&nbsp; 
This money was transferred to an exchange deposit address between July 2023 and some point in 2024. He was able to track multiple payment addresses. ZachXBT adds “Prior to this, $5.5M flowed into an exchange deposit address with payments DPRK IT workers were receiving from July 2023 – 2024 and connections to Sim Hyon Sop, who is OFAC sanctioned. “&nbsp; 
<figure class="wp-block-image"> 
 <figure style="width: 100%" class="wp-caption alignnone">
 <img loading="lazy" decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdyCZPuRDmPqACfN2CZ3IlRO-7odKZfoR8nZsN2KNqXDIyx4mthzTId3mzP_cSSju5bpkw9zYYXPYr0Xf0Q1tuVV5CyrojujHiQPDFHWwzLqdlrVGr95IlpjeNz66ILncjUSE9JgYiDvQFm-bBA60xKsQS2?key=70UYmQuQ8X9u2RN8SsXRzA" alt="" width="1290" height="1058">
 <figcaption class="wp-caption-text">
 Source: Blockchain researcher ZachXBT
 </figcaption>
 </figure> 
</figure> 
US law enforcement suspects that Kim is “involved in the payment of salaries to family members of Chinyong’s overseas DPRK worker delegations” and has received $2 million in crypto for the sale of IT equipment to DPRK-affiliated teams in China and Russia. 
Additionally, he discovered instances of Russian Telecom IP overlaps among developers who claimed to be located in Malaysia and the United States. “At least one of the employees&nbsp; “accidentally leaked their other identities on a notepad.” 
At the end he points out, “A number of experienced teams have hired these devs so it’s not fair to them single as the ones to blame.”

21 North Korea crypto devs make $500K a month – ZachXBT

Table of Contents

Cryptopolitan_News

Other articles published on Aug 16, 2024

Bitcoin in a gray zone as Morgan Stanley, Goldman Sachs diverge

Nigerian Authorities Seize $38M in Crypto Tied to Protests

Arbitrum (ARB) accepted a proposal on L2 native token staking

Floki Becomes Official Partner of Nottingham Forest for Premier League 2024/2025 Season

Litecoin (LTC) and Terra Classic (LUNC) Investors Eye Pawfury Presale

Bitget Launches the First CEX-based Task-to-Earn Platform for Crypto Influencers, Committing $5M ...

Join our free newsletter for daily crypto updates!