North Korean hacking groups have been targeting crypto for years. The 2022 $625 million Ronin bridge exploit was an early wake-up call—but the threat has only evolved.
In 2025 alone, North Korean-affiliated attackers have been linked to a string of campaigns designed to siphon value and compromise key players in Web3: They’ve targeted $1.5 billion worth of assets at Bybit through credential-harvesting campaigns, with millions already laundered. They’ve launched malware attacks on MetaMask and Trust Wallet users, attempted to infiltrate exchanges through fake job applicants, and set up shell companies inside the U.S. to target crypto developers.
And while the headlines often focus on large-scale thefts, the reality is simpler—and more damning. The weakest layer of Web3 is not smart contracts, but humans.
Nation-state attackers no longer need to find zero-days in Solidity. They target the operational vulnerabilities of decentralized teams: poor key management, nonexistent onboar
We współpracy z: https://www.coindesk.com/opinion/2025/06/20/decentralized-protocols-are-soft-targets-for-north-korean-hackers
