Security researcher Taylor Monahan disclosed Sunday that North Korean agents have been embedded inside more than 40 decentralized finance platforms for nearly a decade. The claim connects the $280 million Drift Protocol exploit last week to a broader network of North Korean IT workers operating inside some of crypto's largest projects. Monahan attributed the coordinated operations to what security researchers have linked to the Lazarus Group, a state-sponsored hacking organization.
The revelation indicates a sustained infiltration campaign targeting DeFi infrastructure rather than isolated attacks. According to NCC Group research cited in reporting on the matter, similar attack patterns have been attributed to North Korean threat actors operating against the crypto sector for more than a decade. The discovery raises questions about operational security practices across major DeFi protocols and the extent of undetected compromises within the ecosystem.
Sources: Taylor Monahan (@tayvano_) on X | Bitcoinist | NCC Group Research
To continue reading this as well as other DeFi and Web3 news, visit us at thedefiant.io
