Key Takeaways:
WEEX Crypto News, 2026-04-22 11:50:56
In a sudden escalation, North Korea-linked cyber operatives have seized more than $500 million from decentralized finance (DeFi) platforms within a mere 18-day timeframe. This broad campaign, notably affecting Drift Protocol and KelpDAO, illustrates an intensified strategy to support Pyongyang’s financial needs for its weapons agenda. Notably, these crypto heists have propelled the regime’s annual crypto haul beyond $700 million.
Recent breaches highlight a strategic leap by North Korean cyber operatives. Rather than focusing on fortified core smart contracts, attackers have targeted vulnerable peripheries. For example, the KelpDAO breach occurred when hackers compromised the Remote Procedure Call (RPC) infrastructure, manipulating protocol operations while keeping its core secure. LayerZero Labs, responsible for the Decentralized Verifier Network (DVN), had to deactivate nodes to curb further damage. This method reveals a shift towards exploiting soft targets, echoing corporate espionage tactics.
North Korea doesn’t just rely on remote breaches. It now places operatives inside global crypto startups. A six-month probe reveals that around 100 North Korean agents, using fictitious identities, have penetrated blockchain firms. These operatives secure jobs, access sensitive data, and wait before launching devastating attacks. Recently, investigator ZachXBT exposed a network of DPRK impostors generating approximately $1 million monthly through deceptive employment.
Laundering purloined crypto involves advanced tactics. DPRK’s approach contrasts sharply with typical crypto criminals who favor peer-to-peer and decentralized exchanges. Instead, they rely on specialized Chinese-language services and over-the-counter broker networks, providing limited but reliable exit strategies. Chainalysis reported $2 billion in North Korean crypto thefts for 2025, supported by high-value assaults like the $1.5 billion Bybit raid.
Preventing such breaches demands more robust security protocols. Terence Kwok, from Humanity, emphasizes tightening access controls and improving third-party oversight. Quick action is vital; stolen assets lose traceability once integrated into crypto networks. Cooperation among exchanges, issuers, and law enforcement in the immediate aftermath of a breach is crucial for effective damage control. In essence, protecting the operational perimeter around DeFi systems is as critical as securing the contracts themselves.
North Korea’s operatives amassed over $6.75 billion in crypto assets as of 2025. Recent attacks in 2026, including a $500 million spree, added significantly to this tally.
Instead of targeting core protocols, DPRK hackers exploit peripheral weaknesses and use infiltration to access sensitive data and systems within crypto firms.
DPRK actors avoid decentralized exchanges, opting instead for complex networks involving Chinese-language services and over-the-counter trades to obscure fund origins.
Enhanced access controls, reduced reliance on single points of failure, and swift coordination during breaches are crucial strategies to prevent these attacks.
Such breaches erode trust in crypto systems, prompting significant market withdrawals and necessitating improved security measures across the industry for sustained credibility.
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.













Today’s WEEX TradFi Daily Brief covers pressure from NVIDIA-related AI financing news, energy sector leadership driven by stronger oil prices, and the U.S. after-hours earnings lineup to help you quickly capture stock-token trading opportunities.













WEEX 「小丑牌」第四期正在火热进行中(活动时间:2026 年 7 月 21 日 12:00 – 8 月 16 日 23:59:59,UTC+8)。



