ZachXBT

<p>The post <a href="https://coinpedia.org/news/crypto-hack-alert-north-korean-devs-behind-1-3m-crypto-theft-from-over-25-projects/">Crypto Hack Alert: North Korean Devs Behind $1.3M Crypto Theft from Over 25 Projects</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>ZachXBT, an on-chain blockchain investigator, has uncovered a complex crypto scam that resulted in the theft of $1.3 million from a project’s treasury. The breach was traced back to malicious code inserted by developers who were later identified as North Koreans, working for the regime while using fake identities. This discovery has sparked concern in the crypto community, highlighting serious security risks that many projects may face.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">1/ Recently a team reached out to me for assistance after $1.3M was stolen from the treasury after malicious code had been pushed. <br><br>Unbeknownst to the team they had hired multiple DPRK IT workers as devs who were using fake identities. <br><br>I then uncovered 25+ crypto projects with… <a href="https://t.co/W7SgY97Rd8">pic.twitter.com/W7SgY97Rd8</a></p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1824047425822310580?ref_src=twsrc%5Etfw">August 15, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>One of the affected teams contacted ZachXBT for help, unaware that they had unknowingly hired North Korean developers. These developers had spent time creating convincing profiles, posing as legitimate candidates. </p> 
<p>Their deception was so effective that they were able to integrate into the project’s development team, where they inserted code that enabled the theft.</p> 
<h2 class="wp-block-heading" id="h-the-scam-runs-deeper-25-more-projects-targeted"><strong>The Scam Runs Deeper: 25 More Projects Targeted</strong></h2> 
<p>ZachXBT’s investigation revealed that over 25 other crypto projects had unknowingly hired similar developers. Between July 2023 and 2024, these developers received $5.5 million in payments. The funds were traced to addresses connected to individuals on the OFAC sanctions list, including notorious figures such as Sim Hyon Sop and Sang Man Kim.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">4/ Prior to this $5.5M flowed into an exchange deposit address with payments DPRK IT workers were receiving from July 2023 – 2024 and connections to Sim Hyon Sop who is OFAC sanctioned. <br><br>0x8f0212b1a77af1573c6ccdd8775ac3fd09acf014 <a href="https://t.co/dfWpS77GwJ">pic.twitter.com/dfWpS77GwJ</a></p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1824047465827602550?ref_src=twsrc%5Etfw">August 15, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="key-warnings-for-crypto-projects">Key Warnings for Crypto Projects</h2> 
<p>During his investigation, ZachXBT identified several warning signs for teams to look out for when hiring developers. These include candidates who share contacts for job referrals, provide fake resumes with forged work experience, and use fraudulent IDs during the KYC process.</p> 
<p>One entity in Asia is reportedly making between $300K and $500K per month by managing over 25 contracts simultaneously. The scale and coordination of this operation underline the need for project teams to carefully review KYC details and thoroughly vet potential hires to protect themselves from future losses.</p> 
<p>Also Check Out: <a href="https://coinpedia.org/news/weekly-crypto-hack-report-largest-incidents-and-financial-losses/" target="_blank" rel="noreferrer noopener">Weekly Crypto Hack Report: Largest Incidents and Financial Losses&nbsp;</a></p> 
<p><strong>Is this just the tip of the iceberg? As the crypto industry grows, so do the threats.</strong></p>

Crypto Hack Alert: North Korean Devs Behind $1.3M Crypto Theft from Over 25 Projects

Table of Contents

CoinPedia News

Other articles published on Aug 16, 2024

BTC Nears $60,000 Mark

Spot ETH ETFs Record $39.21M Net Outflows On Thursday Breaking 3-Day Positive Streak

Norway’s Wealth Fund, NBIM, Increased Bitcoin Holdings Significantly

DeFi Market Experiences Significant Growth in 2024

Dubai Court Upholds Cryptocurrency Salaries in Landmark Ruling

Q2 Spot Bitcoin ETF Holdings Up 30% Goldman, Morgan Stanley Lead

Join our free newsletter for daily crypto updates!