A recent six-month infiltration campaign by North Korean hackers at Drift has raised concerns about the crypto industry's vulnerability to state-sponsored attacks. According to security experts, North Korea's desperation for hard currency to fund its nuclear and ballistic missile programs drives its focus on crypto. Unlike other state-backed hackers, North Korea's operatives carry out large-scale, traceable heists on public blockchains due to the country's severely sanctioned economy. This approach is distinct from Russia and Iran, which use crypto to evade sanctions or fund proxy networks.
North Korea's hackers target exchanges, wallet providers, and DeFi protocols, using tactics such as months-long relationship building and supply chain infiltration. The crypto industry's lack of traditional financial safeguards and regulatory guidance creates an environment where even sophisticated teams can be vulnerable to these attacks.