EXPOSED: North Korean Hackers Infiltrate 900+ Crypto Jobs—ZachXBT Sounds Alarm

Pyongyang's digital heist just got a corporate makeover. Blockchain sleuth ZachXBT reveals North Korean operatives may have embedded themselves in over 900 cryptocurrency roles—proving even dictatorships understand the 'career pivot' hustle.

| The Lazarus Résumé |

Forget nuclear codes—these hackers are writing Solidity. The infamous Lazarus Group's new attack vector? LinkedIn profiles with 'Web3 enthusiast' bios and suspiciously polished GitHub commits.

| DeFi's Trojan Horse |

While VCs obsess over tokenomics, Kim Jong-un's cyber brigades bypass KYC checks via fake developer portfolios. Their MO? Land remote jobs, drain protocol treasuries, then ghost—the ultimate rug pull.

Bonus jab: At least they're not doing pointless DAO governance votes like your average DeFi 'thought leader'.

North Korean hackers are becoming more sophisticated

These operatives are not simply working freelance to earn income. In several cases, they have used insider roles to exploit crypto projects, gaining privileged access that enables hacks or rug pulls. This insider positioning makes them particularly dangerous to the industry.

ZachXBT warns that crypto firms must remain vigilant against such threats. In particular, he highlighted that North Korean actors increasingly control verified accounts on major U.S. exchanges like Robinhood and Coinbase. He also noted their growing ability to bypass KYC and AML procedures designed to prevent exactly this kind of infiltration.