Navigating Crypto News

CoinFeather

menu
blank

North Korean workers have been infiltrating DeFi for 7 years: Researcher | Coinfeather

Back to live feed

North Korean workers have been infiltrating DeFi for 7 years: Researcher

Cointelegraph15 days ago2 min readBy Cointelegraph by Martin Young

Key Insights

AI Powered

Quick market read from this story

North Korean IT workers have been embedded in DeFi development for at least seven years, indicating a long-term, systemic risk to protocol integrity and security.
The Lazarus Group's alleged infiltration of over 40 DeFi platforms, including major exploits, highlights a persistent threat that requires enhanced due diligence from projects and investors.
The use of 'third-party intermediaries' by North Korean actors to conduct exploits, as seen with Drift Protocol, suggests an evolving tactic to obscure direct attribution and bypass standard screening processes.
The revelation underscores the need for robust security practices and counter-intelligence measures within the crypto industry to mitigate risks posed by state-sponsored cyber threats.

Read Original Source Source Website

Alpha Snapshot

News type

Action bias

Sentiment

Bearish

Impact

High

Source tier

Tier 1

Coins in Focus

No linked coins for this story.

Catalysts

Related Coverage

Source, catalyst, and sector overlap from the latest feed.

13 days agoCointelegraph

Bitcoin wallets absorb 4.37M BTC as network activity flips to 'bull phase’

Bitcoin long-term wallets have absorbed over 4.37 million BTC, indicating sustained supply reduction and a potential precursor to a bull market phase. The Bitcoin network activity index has entered a 'bull phase,' signaling increased network usage and potentially stronger market sentiment. Reduced inflows from centralized exchanges and a decrease in active addresses suggest a shift towards long-term holding, tightening liquid supply and reducing short-term trading pressure. Despite low active address momentum, historical patterns suggest this can align with profitable accumulation phases for long-term holders.

13 days agoCointelegraph

Democrats question CFTC chair on insider trading in prediction markets

Live Feed

More Market Headlines

Loading the broader stream in the same flow as the homepage feed.

0 loaded

No additional live-feed stories yet

Check back shortly for newer market coverage.

Signal context only. Validate with price action, liquidity, and risk limits before taking a position.

Sectors

US House members are questioning the CFTC's oversight of insider trading on prediction markets, signaling potential regulatory scrutiny that could impact platforms like Kalshi and Polymarket. While the CFTC affirmed its authority over prediction markets, concerns about "morally obscene" event contracts and suspicious trades suggest a heightened risk of regulatory action or new legislation. The ongoing legal battles and congressional inquiries into prediction markets indicate a developing regulatory landscape that traders should monitor closely for potential impacts on market access and operation.

Same source

13 days agoCointelegraph

Spot Bitcoin ETF inflows top $471M but BTC is pinned under $70K: Here’s why

Despite strong $471 million ETF inflows, Bitcoin failed to break $70,000 due to significant selling pressure from public miners and broader geopolitical concerns. Public miners like MARA and RIOT are liquidating BTC reserves, potentially to manage debt or pivot to AI infrastructure, creating a persistent overhang on the market. The options market shows a cautious sentiment with a 17% put premium, indicating traders are actively seeking downside protection rather than anticipating a significant upward move. While ETF inflows are positive, the inability of BTC to sustain higher levels suggests that current institutional demand may not be sufficient to overcome selling pressure from miners and macro-economic uncertainties.

13 days agoCointelegraph

Americans lost $11B to crypto scams in 2025, says FBI

Americans lost over $11 billion to crypto scams in 2025, highlighting significant risks for retail investors and underscoring the need for enhanced security measures. The FBI's report indicates a concerning trend of minors being targeted in crypto scams, resulting in substantial financial losses and raising awareness about vulnerabilities in younger demographics. Investment scams accounted for the highest percentage of crypto-related losses, suggesting that sophisticated fraudulent schemes continue to exploit investor confidence in digital assets. Despite efforts like Operation Level Up, the persistent volume of crypto scams indicates ongoing challenges in combating illicit activities within the digital asset space.

13 days agoCointelegraph

Bitcoin holds $67K support as data exposes price to sentiment divergence

Despite persistent extreme fear sentiment, Bitcoin's price stability above $67,000, supported by strong institutional ETF inflows and accumulator address demand, suggests underlying resilience and potential for a bullish continuation. The divergence between bearish sentiment and BTC's price action, coupled with significant institutional accumulation in March, indicates that market participants are absorbing selling pressure, potentially setting the stage for a retest of higher price levels. While leveraged trading contributed to recent price pumps, the sustained demand from long-term holders and ETF inflows provides a more robust foundation, suggesting that short-term volatility may not derail the broader upward trend if $67,000 support holds.

13 days agoDecrypt

Solana Exchange Stabble Warns Users to Pull Liquidity After North Korean Hacker Scare

Solana DEX Stabble urged users to withdraw liquidity due to a former CTO's alleged ties to North Korean hackers, causing a 62% drop in TVL. The incident highlights ongoing security concerns within the DeFi space, particularly concerning state-sponsored hacking groups. While no exploit occurred on Stabble, the rapid TVL decline underscores user sensitivity to perceived security risks, especially following recent large-scale exploits on Solana. The Solana Foundation's recent security initiatives may be tested by such events, indicating a continued need for robust security measures across the ecosystem.

13 days agoDecrypt

Solana Foundation to Help Secure DeFi Protocols Following $285 Million Drift Hack

The Solana Foundation's STRIDE program represents a proactive institutionalization of security for DeFi protocols, directly addressing the systemic risks highlighted by the recent $285 million Drift exploit. This initiative signals a maturation of the Solana ecosystem, moving beyond individual audits to offer ongoing, tiered security services, which could enhance investor confidence and reduce future exploit potential. The program's tiered approach based on TVL suggests a strategic allocation of resources, prioritizing larger protocols that pose greater systemic risk, a model that may be adopted by other Layer 1s.

13 days agoCoinDesk

How North Korea's 6-month long secret espionage program has crypto community rethinking security

The $270 million Drift exploit, attributed to North Korean state actors, highlights a shift from code vulnerabilities to human-centric social engineering, forcing DeFi to re-evaluate its security paradigms. This incident signals a new threat model where attackers employ long-term espionage tactics, embedding themselves through fake identities and cultivated trust, rather than solely relying on technical exploits. DeFi protocols must now prioritize operational security (OpSec) and human element defenses, as even rigorously audited code can be compromised through compromised team members or social engineering. The evolving threat landscape necessitates a broader security approach encompassing people, processes, and governance, moving beyond traditional smart contract audits to address sophisticated, state-sponsored attacks.

14 days agoThe Coin Republic

Crypto Regulation News: Legal Expert Calls Drift Incident Civil Negligence Case

A legal expert's assessment of the Drift protocol exploit as civil negligence highlights potential liability for DeFi platforms, signaling increased regulatory scrutiny. The detailed account of the 6-month social engineering attack on Drift Protocol underscores the sophisticated tactics threat actors employ, emphasizing the need for enhanced security beyond standard protocols. The connection of the Drift exploit to North Korean state-backed hackers and similarities to the Radiant Capital hack suggest a pattern of coordinated attacks, potentially impacting trust in Solana-based DeFi projects.

14 days agoThe Coin Republic

Crypto Hack News: Drift Protocol Lost $280M After 6-Month Setup

The Drift Protocol hack highlights a concerning shift in attacker tactics from direct code exploits to sophisticated social engineering targeting developers, indicating increased sophistication in crypto security threats. The $280 million loss underscores the significant financial risks associated with decentralized finance protocols, particularly concerning the trust-based collaboration models used by development teams. The connection to the Radiant Capital exploit suggests potential organized, possibly state-sponsored, activity, raising broader concerns about coordinated attacks on the DeFi ecosystem. This incident necessitates a re-evaluation of security protocols within DeFi, emphasizing the need for enhanced contributor verification, device security, and access controls beyond traditional smart contract audits.

13 days agoDecrypt

Trump DOJ Rejects Tornado Cash Developer’s Newest Argument for Dismissal

Prosecutors are pushing back against Tornado Cash developer Roman Storm's attempt to use a recent Supreme Court ruling for dismissal, arguing it is not applicable to his case. The DOJ's stance highlights a continued aggressive prosecution of crypto developers despite some signals of a more favorable stance from the Trump administration. The legal battle underscores the ongoing tension between crypto privacy advocacy and regulatory enforcement, with potential implications for other developers in similar situations. The rejection of Storm's argument suggests the retrial will proceed, focusing on charges of conspiracy to commit money laundering and sanctions evasion.

13 days agoCoinpaper

Solana DEX Stabble Urges Liquidity Exit After North Korea Employee Alert

Solana DEX Stabble's urgent liquidity withdrawal request, prompted by concerns over a developer linked to North Korea, highlights significant security and vetting vulnerabilities within the DeFi ecosystem. The incident, while not a confirmed exploit, has eroded LP confidence and underscores the ongoing risk posed by state-sponsored actors infiltrating crypto projects through false identities. Stabble's new team is attempting to rebuild trust through audits and enhanced controls, but the communication strategy has drawn criticism, indicating potential challenges in restoring platform credibility. This event serves as a cautionary tale for DeFi protocols regarding due diligence and the critical need for robust identity verification processes to mitigate geopolitical and security risks.

13 days agoThe Coin Republic

Crypto Market: CPI Reports and Fed Signals Take Spotlight

Upcoming CPI data and FOMC minutes are poised to introduce significant volatility into the crypto market, as these macroeconomic indicators will heavily influence interest rate expectations. Traders should monitor the March CPI report on April 10th for inflation trends, as higher-than-expected figures could trigger selling pressure, while lower figures may support price appreciation. The release of FOMC minutes on April 8th will provide insight into the Federal Reserve's monetary policy stance, with a dovish outlook potentially benefiting crypto prices and a hawkish one posing a risk. Anticipate potential liquidity shifts and trading activity fluctuations due to major token unlocks scheduled for the upcoming week.

13 days agoDecrypt

Aave Token Falls Near 2-Year Low as Risk Management Firm Becomes Latest to Depart

AAVE's price decline to a near two-year low is directly linked to the departure of Chaos Labs, a key risk management operator, signaling potential instability in Aave's DAO governance and operational continuity. The exit of multiple core contributors, including Chaos Labs and BGD Labs, raises concerns about Aave's internal alignment and the sustainability of its decentralized operational model, potentially impacting investor confidence. Despite the recent V4 protocol launch, AAVE's significant price drop highlights that ongoing governance disputes and contributor departures are overshadowing technological advancements in the short term. With LlamaRisk becoming the sole risk manager and Aave Labs providing additional support, the market will closely monitor the effectiveness of this transition in maintaining protocol security and stability.