Analysis · Security & Hacks
Chainalysis and Binance detail how dozens of low-level employment scams paved the path for multi-billion-dollar exploits.
Key point 1 of 3
01
DPRK hackers stole over $14.3M across dozens of small fake interview attacks over 18 months to refine tactics before targeting major exchanges.
Key point 2 of 3
02
Binance lost billions after an engineer executed a malicious coding test delivered through a multi-week fake job recruitment process.
Key point 3 of 3
03
A Sept. 24 exploit on Bitget resulted in $387M stolen by North Korean actors, driving total DPRK crypto thefts past $1B.
Context
North Korean state actors have diversified from protocol exploits to social engineering, using fake employment offers and malicious assessments to compromise internal tools.
Why it matters
Exchanges and protocols face escalating operational risks, driving rapid adoption of automated on-chain tracing, stricter device permissions, and asset-freezing protocols.
What to watch
Chainalysis will detail new automated investigative capabilities on Nov. 19, 2026, as security teams adjust recruitment and infrastructure key controls.
Sources
Built from 8 primary sources, machine-checked before publication.
Keep reading
Read the full analysis
AI-generated, source-verified. Sources, citations and live prices on the article page.