Blockchain analyst ZachXBT documented at least 25 cases where IT specialists from North Korea secured jobs in crypto companies by posing as developers and security experts to gain access to internal systems and extract funds.
This data challenges the perception that their activity is limited to legal remote work for income.
The information came after a statement by Replit CEO Amjad Masad, who claimed that North Korean workers mostly seek remote jobs for financial gain rather than espionage. ZachXBT responded that such claims are inaccurate, pointing to dozens of confirmed cases of hacking and extortion.
According to his findings, North Korean agents use AI tools to pass interviews and rely on fake identities. Once inside projects, they not only steal funds but also threaten former employers with data leaks.
This reflects a systematic approach that includes deception during hiring, infiltration into teams, and later pressure on companies.
Security Concerns
Previously, ZachXBT criticized exchanges and Web3 projects for ignoring thefts and collaborating with dubious entities, noting that parts of the industry prefer to overlook liquidity sources. His new statements confirm the growing scale of the threat.
This month Binance founder Changpeng Zhao listed four main scenarios of North Korean hacker attacks: fake resumes, infected links during interviews, fraud through support services, and bribery of employees or contractors.
He referred to a recent data breach through Indian outsourcing, which caused American users to lose more than $400 mln.
According to investigations, these operations generated billions for North Korea. In 2024, $1,3 bln was stolen in 47 attacks, and in the first half of 2025 alone, $2,2 bln. These funds, laundered through networks, are directed to finance the country’s military program.
Read also:
- Unfollow! ZachXBT Accuses 200 Influencers of Hidden Token Promotions
- ZachXBT Warns of Suspicious SOL Airdrop Linked to NFT Scammers
- NFT Project RMRK Faces Token Freeze by WLFI Compliance
This post is for informational purposes only and is not advertising or investment advice. Please do your own research before making any decisions.