Ethereum Foundation Program Identifies 100 DPRK-Linked Crypto Workers

Bitcoinist04-18 04:00

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure An open-source detection tool and an industry-standard identification framework — those were among ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2628780122?lang=en_US&edition=fundamental","thumbnail":"https://bitcoinist.com/wp-content/uploads/2026/04/a_2d713b.jpg?resize=350%2C250","is_english":true,"pubTime":"2026-04-18 04:00","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2628780122","market":"nz","top_or_hot":-1,"title":"Ethereum Foundation Program Identifies 100 DPRK-Linked Crypto Workers","media":"Bitcoinist","content":"<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nAn open-source detection tool and an industry-standard identification framework — those were among ...</p>\n\n<a href=\"https://bitcoinist.com/ethereum-foundation-program-identifies-100-dprk-linked-crypto-workers/\">Source Link</a>\n\n</div>\n","source":"bitcoinist_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ethereum Foundation Program Identifies 100 DPRK-Linked Crypto Workers</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nEthereum Foundation Program Identifies 100 DPRK-Linked Crypto Workers\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-18 04:00 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://bitcoinist.com/ethereum-foundation-program-identifies-100-dprk-linked-crypto-workers/><strong>Bitcoinist</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nAn open-source detection tool and an industry-standard identification framework — those were among ...</p>\n\n<a href=\"https://bitcoinist.com/ethereum-foundation-program-identifies-100-dprk-linked-crypto-workers/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETHA","symbol_name":"以太坊ETF-iShares","start_time":0,"source_url":"https://bitcoinist.com/ethereum-foundation-program-identifies-100-dprk-linked-crypto-workers/","article_id":"2628780122","we_media_id":null,"thumbnails":["https://bitcoinist.com/wp-content/uploads/2026/04/a_2d713b.jpg?resize=350%2C250"],"rights":{"source":"bitcoinist_highlight","url":"https://bitcoinist.com/ethereum-foundation-program-identifies-100-dprk-linked-crypto-workers/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2628780122","pubTimestamp":1776456041,"columns":[],"sourceInfo":{"source_id":"bitcoinist_highlight","name":"Bitcoinst"},"weMediaInfo":null,"summary":"An open-source detection tool and an industry-standard identification framework — those were among the outputs of a single researcher working...","collect":0,"end_time":0,"defaultTopTitle":"bitcoinist.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHA":"以太坊ETF-iShares","SETH":"1倍做空以太币期货ETF-Proshares","ETHD":"ProShares UltraShort Ether ETF","FETH":"以太币ETF-Fidelity","ETHE":"最大以太坊ETF-Grayscale","QETH":"以太坊ETF-Invesco Galaxy","ETHI":"Defiance Leveraged Long Income Ethereum ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETU":"T-Rex 2X Long Ether Daily Target ETF","ETCO":"Grayscale Ethereum Covered Call ETF","ETHT":"ProShares Ultra Ether ETF","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","ETHV":"以太坊ETF-VanEck","EZET":"以太坊ETF-Franklin","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","EETH":"以太币期货ETF-ProShares","YETH":"Roundhill Ether Covered Call Strategy ETF"},"translate_title":"以太币基金会计划确定了100名与朝鲜有关的加密货币工人","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETHA":0.6,"YETH":0.6,"ETHD":0.6,"BTF":0.6,"ETHV":0.6,"ETQ":0.6,"ETHU":0.6,"SETH":0.6,"FETH":0.6,"ETHW":0.6,"QETH":0.6,"ETHE":0.6,"ETHT":0.6,"ETH":0.6,"ETCO":0.6,"ETU":0.6,"ETHI":0.6,"EETH":0.6,"EZET":0.6},"content_text":"Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nAn open-source detection tool and an industry-standard identification framework — those were among the outputs of a single researcher working on a six-month stipend.\nRelated Reading: Tether Expands Bitcoin Bet, Holdings Hit $7.2B After $70M Purchase\nThe findings, published by the Ethereum Foundation, came out of a program called ETH Rangers, which was set up in late 2024 to fund security work that benefits the broader crypto ecosystem.\n\n\n\n\n\n\nOne Researcher, One Stipend, 100 Operatives\nOne of the grant recipients used the funding to build the Ketman Project, an investigation focused on fake developer identities inside crypto companies.\nOver six months, the project tracked down 100 North Korean IT workers embedded in Web3 organizations. About 53 projects were contacted and warned that they may have hired active operatives linked to the Democratic People’s Republic of Korea.\nThe Ethereum Foundation described the threat as “one of the most pressing operational security threats facing the Ethereum ecosystem today.”\n\n\n\n\n\n\n\n\n\n\n\n\n\n🚨 A project funded by the #Ethereum Foundation revealed 100 North Korean IT workers who sneaked into #Web3 companies using false identities. 💛#cryptosona $ETH pic.twitter.com/aCDKUV4mGO\n— CryptOpus (@ImCryptOpus) April 17, 2026\nThe Ketman Project’s website lays out the tactics these workers use — behavioral patterns, technical habits, and identity tricks that allow them to pass as legitimate developers.\n\n\n\n\n\n\n\n\n\n\n\n\nSome of the red flags are surprisingly basic. Workers were caught reusing the same profile photos and metadata across different GitHub accounts.\nDuring screen-sharing sessions, unlinked email addresses were accidentally exposed. In some cases, device language settings — set to Russian — gave away identities that contradicted the nationalities being claimed.\n\nETHUSD trading at $2,348 on the 24-hour chart: TradingView\nHow Operatives Were Caught\nThe Ketman Project did not just identify individuals. It built infrastructure. An open-source tool was developed to flag unusual GitHub activity tied to suspicious accounts.\nA separate framework for identifying DPRK-linked workers was co-authored with the Security Alliance, a nonprofit focused on blockchain security. Both resources are now available for other organizations to use.\nReports indicate the Ethereum Foundation did not disclose the specific methods used to unmask the operatives beyond what the Ketman Project’s own publications describe. The project’s website, however, offers detailed write-ups on the operational patterns that gave workers away.\nA Threat Measured In Billions\nNorth Korea’s presence in crypto is not new. State-linked hacking groups, including the well-known Lazarus Group, have been tied to some of the largest thefts in the industry’s history.\nRelated Reading: Denmark’s Crypto Ownership Rate Among Lowest In Europe At 4%: Report\nAccording to reports, billions of dollars in digital assets have been stolen by North Korean actors over the years.\nThe ETH Rangers program was created specifically to address security gaps through stipend-funded individuals doing public-interest work.\nThe Ketman Project represents one of its first publicly documented results. Whether other grant recipients have produced similar findings has not been disclosed.\nFeatured image from Chief Learning Officer, chart from TradingView\n\n\n\nEditorial Process for bitcoinist is centered on delivering thoroughly researched, accurate, and unbiased content. We uphold strict sourcing standards, and each page undergoes diligent review by our team of top technology experts and seasoned editors. This process ensures the integrity, relevance, and value of our content for our readers.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2628780122","isCrawlerRequest":true}