North Korea Strikes Again: $285 Million Exploit Raises Questions For Circle

Benzinga04-03

Blockchain analytics firm Elliptic on Thursday flagged “multiple indicators” that North Korea’s state-sponsored hackers may be behind the $285 million exploit of Drift Protocol, the largest DeFi hack ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2624068676?lang=en_US&edition=fundamental","thumbnail":"https://www.benzinga.com/files/images/story/2026/04/02/Analysts-North-Korea-Watches-Drills-Amid.jpeg","is_english":true,"pubTime":"2026-04-03 01:46","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2624068676","market":"nz","top_or_hot":-1,"title":"North Korea Strikes Again: $285 Million Exploit Raises Questions For Circle","media":"Benzinga","content":"<div>\n<p>Blockchain analytics firm Elliptic on Thursday flagged “multiple indicators” that North Korea’s state-sponsored hackers may be behind the $285 million exploit of Drift Protocol, the largest DeFi hack ...</p>\n\n<a href=\"https://www.benzinga.com/crypto/cryptocurrency/26/04/51633954/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle\">Source Link</a>\n\n</div>\n","source":"Benzinga","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>North Korea Strikes Again: $285 Million Exploit Raises Questions For Circle</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nNorth Korea Strikes Again: $285 Million Exploit Raises Questions For Circle\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-03 01:46 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.benzinga.com/crypto/cryptocurrency/26/04/51633954/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle><strong>Benzinga</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Blockchain analytics firm Elliptic on Thursday flagged “multiple indicators” that North Korea’s state-sponsored hackers may be behind the $285 million exploit of Drift Protocol, the largest DeFi hack ...</p>\n\n<a href=\"https://www.benzinga.com/crypto/cryptocurrency/26/04/51633954/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"SLON","symbol_name":"ProShares Ultra Solana ETF","start_time":0,"source_url":"https://www.benzinga.com/crypto/cryptocurrency/26/04/51633954/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle","article_id":"2624068676","we_media_id":null,"thumbnails":["https://www.benzinga.com/files/images/story/2026/04/02/Analysts-North-Korea-Watches-Drills-Amid.jpeg"],"rights":{"source":"Benzinga","url":"https://www.benzinga.com/crypto/cryptocurrency/26/04/51633954/north-korea-strikes-again-285-million-exploit-raises-questions-for-circle","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2624068676","pubTimestamp":1775151963,"columns":[],"sourceInfo":{"source_id":"Benzinga","name":"Benzinga Cypto"},"weMediaInfo":null,"summary":"Blockchain analytics firm Elliptic on Thursday flagged “multiple indicators” that North Korea’s state-sponsored hackers may be behind the $285 million exploit of Drift Protocol, the largest DeFi hack of 2026 so far that wiped out more than half of the Solana-based exchange’s total value locked.","collect":0,"end_time":0,"defaultTopTitle":"benzinga.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"SLON":"ProShares Ultra Solana ETF","SSK":"Rex-Osprey SOL + Staking ETF","SOLT":"2x Solana ETF","SOLZ":"Solana ETF","BSOL":"Bitwise Solana Staking ETF"},"translate_title":"朝鲜再次发动袭击：2.85亿美元的漏洞引发Circle质疑","themeId":"a7885b2fd55cc3c0db952471104774ba","isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"SSK":0.9,"SLON":0.9,"BSOL":0.9,"SOLZ":0.85,"SOLT":0.61},"content_text":"Blockchain analytics firm Elliptic on Thursday flagged “multiple indicators” that North Korea’s state-sponsored hackers may be behind the $285 million exploit of Drift Protocol, the largest DeFi hack of 2026 so far that wiped out more than half of the Solana-based exchange’s total value locked.Arthur Hayes, BitMEX co-founder, Maelstrom CIO, and Drift Protocol advisor, pointed the finger at Solana (CRYPTO: SOL) itself. “If Solana had native multi sig addresses, would the Drift hack even have been possible? Actually curious, not trolling,” Hayes wrote on X.Ledger CTO Charles Guillemet drew a direct comparison to the $1.4 billion Bybit hack of 2025, which the FBI attributed to North Korea’s Lazarus Group. The pattern is nearly identical: compromised multi sig signers, social engineering, and malicious transactions disguised as routine operations.The Lazarus PlaybookThe hacker spent weeks setting up the attack. They created a fake token called CarbonVote Token, seeded it with $500 in liquidity, and wash-traded it to fool Solana price oracles into treating it as legitimate. On April 1, they used compromised admin keys to list the token on Drift, posted it as collateral, and drained real assets in 31 transactions over roughly 12 minutes.Elliptic’s report noted the attack’s pre-positioned wallets, early test transactions, and structured laundering flow all mirror previous Lazarus operations. The firm said this would represent the eighteenth DPRK-linked act it has tracked in 2026, with over $300 million stolen this year alone.North Korean hackers reportedly stole a record $2 billion in crypto in 2025, according to Chainalysis. The U.S. Treasury has linked stolen crypto assets to Pyongyang’s weapons of mass destruction program.Circle Sat On Its HandsCircle had frozen 16 unrelated business hot wallets just days earlier in a sealed civil case. ZachXBT called the contrast evidence that Circle is a bad actor for the industry.Benzinga reached out to Circle for comment. Circle is down 2% today, and 13% year to date. Drift’s TVL collapsed from $550 million to under $300 million within the hour. The DRIFT token crashed over 40%. SOL fell 9% to an intraday low near $78.60. Solana Foundation President Lily Liu said the incident “hits hard” but stressed the real targets are now “humans: social engineering and opsec weaknesses more than code exploits.”Image: ShutterstockMarket News and Data brought to you by Benzinga APIs© 2026 Benzinga.com. Benzinga does not provide investment advice. All rights reserved.To add Benzinga News as your preferred source on Google, click here.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.40.0","shortVersion":"4.40.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2624068676","isCrawlerRequest":true}