North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions

Bitget App

Trade smarter

Bitget

News

Markets

North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions

Bitget-RWA2025/11/24 03:18

By:Bitget-RWA

- A U.S. intelligence officer warns North Korea has infiltrated 15-20% of global crypto firms to fund nuclear programs, exploiting remote workers in developing nations as intermediaries. - Pyongyang operatives use 20% earnings-sharing schemes to recruit freelancers on platforms like Upwork , installing malware to access U.S. infrastructure while evading sanctions. - The U.S. Treasury reports $3B stolen in crypto over three years, with North Korea leveraging stolen IP and embedded workers to maintain long-t

An intelligence officer from SEAL Team has disclosed that North Korean operatives have penetrated between 15% and 20% of cryptocurrency companies worldwide, a rate significantly exceeding earlier assumptions. This revelation, shared by Pablo Sabbatella, the founder of Web3 security firm opsek and a member of the Security Alliance, highlights the escalating danger posed by North Korea’s cyber-espionage activities. Sabbatella

cautioned that as many as 30% to 40% of job applicants

in the crypto sector could be North Korean agents, who use remote workers in less developed nations as proxies to circumvent sanctions and infiltrate vital systems.

Their methods are highly advanced. Due to global sanctions, North Korean hackers cannot apply for jobs directly, so they

enlist remote workers from countries such as Ukraine

and the Philippines to serve as go-betweens. These intermediaries are typically offered a 20% share of the income for providing their identities or accounts on freelance platforms like Upwork and Freelancer. Once inside, the North Korean agents deploy malware on the intermediaries’ devices to gain access to U.S. IP addresses and sensitive networks. Their consistent work ethic and lack of complaints

frequently help them retain their positions

for long durations.

The financial impact is substantial. The U.S. Treasury

disclosed that North Korean cybercriminals

have stolen more than $3 billion in digital assets over the last three years, channeling these funds into North Korea’s nuclear weapons initiatives. The extent of this infiltration goes beyond theft, involving embedded operatives who oversee infrastructure at leading crypto companies, presenting an ongoing threat to the sector’s safety.

Sabbatella pointed out the sector’s susceptibility, noting that many crypto founders have weak operational security (OPSEC). “Most are fully doxxed, fail to protect private keys adequately, and are easy targets for social engineering,” he stated

as reported

. To identify infiltrators, he recommended inquiring about opinions on Kim Jong Un, since North Korean agents are forbidden from speaking negatively about their leader

according to expert analysis

These disclosures come as tensions on the Korean Peninsula intensify. North Korea recently

denounced a defense pact between the U.S. and South Korea

that permits Seoul to develop nuclear-powered submarines, warning that this could ignite a regional arms race. The agreement, authorized by President Donald Trump during his latest visit to South Korea, has

provoked strong opposition from Pyongyang

, which sees it as a violation of denuclearization promises.

South Korea’s newly elected President, Lee Jae Myung, is confronted with the dual task of pursuing diplomatic engagement with Pyongyang while advancing military upgrades. Although he has halted anti-North broadcasts and reopened communication lines,

experts emphasize the importance

of strengthening cyber-intelligence and deepening cooperation with Japan. Public backing for South Korea’s own nuclear arsenal has

risen, with 76% of respondents

supporting the idea in a recent survey.

North Korea's Digital Trojan Horse: Crypto Firms Infiltrated to Fund Nuclear Ambitions image 0

The wider geopolitical environment is evolving. North Korea’s partnerships with Russia and China, which include a mutual defense agreement and troop deployments to Ukraine,

have strengthened its strategic leverage

. This cooperation with an “anti-Western bloc” in Northeast Asia

makes it harder

to isolate North Korea through sanctions alone.

As the cryptocurrency industry contends with North Korean infiltration, these events underscore the complex links between cybercrime, international politics, and economic conflict. For South Korea, the challenge lies in balancing deterrence with dialogue, all while protecting its technological and financial systems from threats posed by both state actors and independent groups.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops

Lock your assets and earn 10%+ APR

Lock now!

- Ripple's RLUSD stablecoin gains Abu Dhabi regulatory approval as UAE advances digital finance leadership. - ADGM's "Accepted Fiat-Referenced Token" designation enables institutional use for lending and cross-border payments. - RLUSD's $1.2B market cap growth reflects institutional demand, backed by USD reserves and dual blockchain operations. - UAE's ADGM-DIFC regulatory synergy attracts global fintechs , with Ripple expanding partnerships across Africa and Asia. - Regulatory milestones position RLUSD to

Bitget-RWA•2025/11/27 18:56

Ethereum Updates: Ethereum Drops to $2,800, Prompting Surge in Demand for ZKP's Hardware-Based Presale

- Ethereum's price fell below $2,800, triggering $6.5M liquidations and testing critical support levels amid declining on-chain demand metrics. - Institutional players like BitMine accumulated 3.62M ETH (~$10.4B) despite the selloff, signaling long-term bullish conviction. - ZKP's hardware-driven presale gained traction with $17M in ready-to-ship Proof Pods and Miami Dolphins partnership for privacy-focused sports analytics. - Mutuum Finance's $19M DeFi presale and ZKP's auction model with $50K wallet caps

Bitget-RWA•2025/11/27 18:44

Ethereum Updates: Ethereum Drops to $2,800, Prompting Surge in Demand for ZKP's Hardware-Based Presale

Vitalik Buterin Supports ZKsync: What This Means for Layer 2 Scaling

- Vitalik Buterin endorsed ZKsync in late 2025, highlighting its "underrated and valuable" work alongside the Atlas upgrade achieving 15,000 TPS and $0.0001 fees. - ZKsync's zero-knowledge rollups and EVM compatibility enabled institutional adoption by Deutsche Bank , Sony , and Goldman Sachs for cross-chain and enterprise use cases. - The Fusaka upgrade aims to double throughput to 30,000 TPS by December 2025, positioning ZKsync to compete with Polygon zkEVM and StarkNet in Ethereum's Layer 2 landscape. -

Bitget-RWA•2025/11/27 18:44

Vitalik Buterin Supports ZKsync: What This Means for Layer 2 Scaling

The ZK Atlas Enhancement: Revolutionizing Blockchain Scalability?

- ZKsync's 2025 Atlas Upgrade achieves 15,000–43,000 TPS with sub-1-second finality, addressing Ethereum L2 scalability bottlenecks via Airbender proofs and modular OS. - DeFi protocols like Aave and Lido leverage ZKsync's $0.0001/tx costs to unify liquidity, while Deutsche Bank and Sony adopt its trustless cross-chain infrastructure for compliance and transparency. - ZK token surged 150% post-upgrade, with TVL hitting $3.3B and analysts projecting 60.7% CAGR for ZK Layer-2 solutions by 2031 amid instituti

Bitget-RWA•2025/11/27 18:44