North Korean Infiltration of Crypto Firms Far Deeper Than Previously Believed

Pablo Sabatella, founder of Web3 audit firm Opsek and member of the Security Alliance, revealed alarming data at an industry event in Buenos Aires. North Korean operatives have infiltrated approximately 20% of cryptocurrency companies, with some estimates suggesting they may secretly control 30-40% of all operations.

The infiltration tactics have grown increasingly sophisticated. Agents are now using foreign nationals, particularly U.S.-based individuals, as fronts to bypass hiring processes. By obtaining local IP addresses and requesting special interview accommodations, they mask their true origins. Malware-infected computers enable remote access, making it appear as though work is being conducted domestically.

Once embedded, these operatives gradually gain access to critical systems and sensitive data without raising suspicion. Sabatella warned that a significant portion of job applications submitted to crypto firms originate from North Korean-linked individuals using advanced identity-disguising techniques.