Ethereum Targets North Korea’s Secret Workforce — Are Your Favorite DeFi Protocols Compromised?

Bitcoinist04-18 02:30

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure The Ethereum Foundation exposed 100 Democratic People’s Republic of Korea (DPRK)‑linked IT workers ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2628787474?lang=en_US&edition=fundamental","thumbnail":"https://bitcoinist.com/wp-content/uploads/2026/04/generated_image102.png?resize=350%2C250","is_english":true,"pubTime":"2026-04-18 02:30","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2628787474","market":"nz","top_or_hot":-1,"title":"Ethereum Targets North Korea’s Secret Workforce — Are Your Favorite DeFi Protocols Compromised?","media":"Bitcoinist","content":"<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nThe Ethereum Foundation exposed 100 Democratic People’s Republic of Korea (DPRK)‑linked IT workers ...</p>\n\n<a href=\"https://bitcoinist.com/ethereum-targets-north-korea-secret-workforce/\">Source Link</a>\n\n</div>\n","source":"bitcoinist_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ethereum Targets North Korea’s Secret Workforce — Are Your Favorite DeFi Protocols Compromised?</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nEthereum Targets North Korea’s Secret Workforce — Are Your Favorite DeFi Protocols Compromised?\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-18 02:30 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://bitcoinist.com/ethereum-targets-north-korea-secret-workforce/><strong>Bitcoinist</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nThe Ethereum Foundation exposed 100 Democratic People’s Republic of Korea (DPRK)‑linked IT workers ...</p>\n\n<a href=\"https://bitcoinist.com/ethereum-targets-north-korea-secret-workforce/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETHT","symbol_name":"ProShares Ultra Ether ETF","start_time":0,"source_url":"https://bitcoinist.com/ethereum-targets-north-korea-secret-workforce/","article_id":"2628787474","we_media_id":null,"thumbnails":["https://bitcoinist.com/wp-content/uploads/2026/04/generated_image102.png?resize=350%2C250"],"rights":{"source":"bitcoinist_highlight","url":"https://bitcoinist.com/ethereum-targets-north-korea-secret-workforce/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2628787474","pubTimestamp":1776450608,"columns":[],"sourceInfo":{"source_id":"bitcoinist_highlight","name":"Bitcoinst"},"weMediaInfo":null,"summary":"The Ethereum Foundation exposed 100 Democratic People’s Republic of Korea (DPRK)‑linked IT workers embedded across roughly 53 crypto projects. Ethereum...","collect":0,"end_time":0,"defaultTopTitle":"bitcoinist.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHT":"ProShares Ultra Ether ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","ETHV":"以太坊ETF-VanEck","EZET":"以太坊ETF-Franklin","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","ETHA":"以太坊ETF-iShares","SETH":"1倍做空以太币期货ETF-Proshares","EETH":"以太币期货ETF-ProShares","YETH":"Roundhill Ether Covered Call Strategy ETF","ETHD":"ProShares UltraShort Ether ETF","FETH":"以太币ETF-Fidelity","ETHE":"最大以太坊ETF-Grayscale","QETH":"以太坊ETF-Invesco Galaxy","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETU":"T-Rex 2X Long Ether Daily Target ETF","ETCO":"Grayscale Ethereum Covered Call ETF"},"translate_title":"以太币瞄准朝鲜的秘密劳动力——你最喜欢的DeFi协议被泄露了吗？","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"BTF":0.6,"EZET":0.6,"ETU":0.6,"ETHI":0.6,"ETQ":0.6,"ETHW":0.6,"SETH":0.6,"ETHT":0.6,"FETH":0.6,"ETH":0.6,"EETH":0.6,"ETHE":0.6,"ETHA":0.6,"ETHD":0.6,"ETHU":0.6,"QETH":0.6,"ETHV":0.6,"ETCO":0.6,"YETH":0.6},"content_text":"Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nThe Ethereum Foundation exposed 100 Democratic People’s Republic of Korea (DPRK)‑linked IT workers embedded across roughly 53 crypto projects.\nEthereum Foundation Levels Up Its Security With A Detective Program\nThe North Korean secret crypto-agents don’t rest, so the Ethereum Foundation decided it was time they put on the detective’s hat to track them before they too fell victims to them, just as Drift Protocol was at the beginning of the month. And so, yesterday afternoon the Foundation announced on an official blog post the starking results yielded by the ETH Rangers Program (and yes, everything related to North Korean hackers inevitably sounds straight out of an RPG or action movie).\n\n\n\n\n\n\n\nThe ETH Rangers Program has wrapped up and the results speak for themselves: $5.8M+ recovered, 785+ vulnerabilities reported, 100+ DPRK operatives identified, and so much more.\nA decentralized defence for a decentralized network.\nRead the full recap 👇\n— EF Ecosystem Support Program (@EF_ESP) April 16, 2026\nAccording to the blog post, the Ethereum Foundation teamed up with Secureum, The Red Guild, and Security Alliance (SEAL) in late 2024 to roll out said program. The initiative offered stipends to people carrying out public‑goods security work across the Ethereum ecosystem.\nRelated Reading: Blockchain Is South Korea’s New Fiscal Weapon — A Blow To Privacy?\nThe program’s mission consisted in backing independent security initiatives that strengthen Ethereum’s overall robustness, while spotlighting and rewarding contributors with a proven history of delivering high‑impact security work for the broader network.\n\n\n\n\n\n\n\n\n\n\n\n\nAfter six months, the results of the program speak for itself.\nThe DPRK Crypto-Infiltration Saga, Parth Who-Is-Even-Counting-At-This-Point\nThe ETH Rangers Program funded multiple crypto-security projects, but the Ketman Project was the one “focused on discovering and expelling North Korean (DPRK) IT workers who have infiltrated blockchain projects under fake identities”, per the blog post.\n\n\n\n\n\n\n\n\n\n\n\n\nOver the six months of the investigation, they contacted roughly 53 different projects and uncovered around 100 DPRK IT operatives embedded inside Web3 organizations.\nTheir findings were shared in a series of detailed reports on ketman.org, which drew more than 3,300 active users and 6,200 page views, and explored themes such as account‑takeover techniques, the infiltration of freelance platforms, and emerging DPRK‑Russia ties. They also built and open‑sourced gh‑fake‑analyzer, a GitHub profile analysis tool designed to flag suspicious activity patterns, which is now available via PyPI.\nIn addition, they co‑authored the DPRK IT Workers Framework with SEAL, a document that has quickly become a go‑to reference for the industry, and supplied crucial data to the Lazarus.group threat‑intel project, with their work highlighted in a presentation at DEF CON.\nOverall Results Of The Ethereum Program\nThe work produced by the 17 stipend recipients cover everything from vulnerability research and security tooling to education, threat intelligence, and hands‑on incident response.\nAccording to the Ethereum Foundation, more than $5.8 million in funds have been recovered or frozen, while over 785 vulnerabilities, client bugs, and proof‑of‑concept exploits have been reported or documented. The Program has also helped identify around 100 DPRK state‑sponsored operatives embedded across multiple teams, and its threat‑intelligence and investigative content has reached over 209,000 viewers and users.\nOn the builder side, more than 800 teams have taken part in sponsored security challenges and investigations, supported by over 80 workshops, talks, and technical or educational resources. The initiative has coordinated responses to more than 36 security incidents and driven the creation or improvement of at least seven open‑source tooling repositories, frameworks, and implementations that further harden the ecosystem.\nRelated Reading: Bitcoin Created By The CIA? Chinese Professor Jiang Xueqin Makes Bold Claim\nThe Saga Continues\nThe DPRK-linked hacks continue to be a serious issue amongst the crypto community. Recently, key actors have been less lenient and more active in trying to uncover and stop their threat.\nLet’s remember that, following the  the attribution of the April 1st $285 million attack on Drift Protocol to UNC4736, a North Korea–aligned, state‑sponsored hacking group, crypto detective ZachXBT uncovered an internal North Korean payment server tied to 390+ accounts, chat logs, and transaction histories.\nA few weeks ago, some crypto builders confessed on the social network X that they are passing tests during interviews to developers to make sure they are not North Korean agents.\nInvesting in visible, transparent security collaborations (like EF’s backing of ETH Rangers/Ketman/SEAL) may deserve a premium in risk models, while protocols with opaque teams and loose hiring are increasingly “headline risk” candidates.\n\nAt the moment of writing, ETH trades for around $2,300 on the daily chart. Source: ETHUSD on Tradingview.\nCover image from Perplexity. ETHUSD chart from Tradingview.\n\n\n\nEditorial Process for bitcoinist is centered on delivering thoroughly researched, accurate, and unbiased content. We uphold strict sourcing standards, and each page undergoes diligent review by our team of top technology experts and seasoned editors. This process ensures the integrity, relevance, and value of our content for our readers.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2628787474","isCrawlerRequest":true}