Connect with us
DAPA Banner

Crypto World

Ethereum Foundation-funded project exposes 100 DPRK developers operating in crypto

Published

on

Ethereum Foundation-funded project exposes 100 DPRK developers operating in crypto

A six-month investigation backed by the Ethereum Foundation has uncovered how North Korean operatives quietly embedded themselves inside dozens of Web3 teams under false identities.

Summary

  • Ethereum Foundation backed a six-month probe that identified 100 North Korean operatives inside Web3 firms.
  • Ketman Project alerted 53 crypto teams after tracing fake developer identities and suspicious GitHub activity.
  • Investigators linked the pattern to long-running DPRK infiltration tied to major exploits involving the Lazarus Group.

The Ethereum Foundation said Thursday that its ETH Rangers initiative funded a security-focused effort that identified 100 individuals linked to the Democratic People’s Republic of Korea operating within crypto companies. The program, launched in late 2024, was designed to support public goods work through stipends for independent researchers.

One of those recipients used the funding to launch the Ketman Project, which focused on tracking “fake developers” working inside Web3 organizations. Over the six-month period, the project flagged 100 suspected DPRK IT workers and reached out to 53 crypto projects that may have unknowingly employed them.

Advertisement

“This work directly addresses one of the most pressing operational security threats facing the Ethereum ecosystem today,” the foundation said.

Findings add to a growing body of evidence showing that North Korean-linked developers have spent years embedding themselves across the crypto industry, often blending into teams through credible technical contributions and fabricated professional identities.

Security researcher and MetaMask developer Taylor Monahan has previously said such activity dates back to the early DeFi era, with DPRK-linked developers contributing to widely used protocols.

Advertisement

“Lots of DPRK IT workers built the protocols you know and love, all the way back to DeFi summer,” she said, noting that more than 40 platforms have relied on such contributors at different points. Claims of extensive experience are not always fabricated, she added, saying their “seven years of blockchain dev experience” is “not a lie.”

Investigators have consistently tied these operations to the Lazarus Group, a state-backed collective linked to some of the largest crypto thefts in recent years. Estimates from R3ACH analysts put total stolen funds at around $7 billion since 2017, including attacks such as the $625 million Ronin Bridge exploit, the $235 million WazirX breach, and the $1.4 billion Bybit incident.

Simple tactics, persistent execution

Despite the scale of damage, many infiltration attempts rely on relatively basic methods rather than advanced exploits. Analysts say persistence, social engineering, and identity layering often prove more effective than technical sophistication.

Independent blockchain investigator ZachXBT noted that many of these operations are “basic and in no way sophisticated,” adding that “the only thing about it is they’re relentless.” Outreach typically happens through job applications, LinkedIn profiles, email exchanges, and remote interviews, allowing operatives to gradually build trust within teams.

Advertisement

Recent incidents have shown how far such tactics can go. Drift Protocol’s $280 million exploit was linked to a North Korean-affiliated group, with attackers using intermediaries and fully constructed professional identities to establish credibility before executing the breach.

Red flags and detection efforts expand

Details from the Ketman Project shed light on how these operatives maintain cover inside development teams. Common indicators include reusing avatars or profile metadata across multiple GitHub accounts, unintentionally exposing unrelated email addresses during screen sharing, and using system language settings that contradict claimed nationalities.

Alongside its investigative work, the project developed an open-source tool designed to flag suspicious GitHub activity. It also co-authored an industry framework for identifying DPRK-linked IT workers in collaboration with the Security Alliance.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

TRX Now Live on Binance.US as TRON DAO Expands Regulated U.S. Market Access

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • TRX is now tradable on Binance.US with TRX/USD and TRX/USDT pairs live for U.S.-based users.
  • The listing gives American investors regulated and compliant access to the TRON blockchain network.
  • TRON DAO says the move supports long-term growth by expanding TRX availability on licensed platforms.
  • USDT on TRC20 remains central to TRON’s ecosystem as CEX liquidity grows through this new listing.

TRX, the native token of the TRON blockchain, is now available on Binance.US. TRON DAO made the announcement on April 17, 2026.

The listing brings TRX to a licensed, U.S.-regulated digital asset exchange. Trading is live with TRX/USD and TRX/USDT pairs.

This move expands access for American investors through a compliant market channel. It also adds liquidity to one of the most widely used blockchain networks globally.

TRX Gains a Foothold in Compliant U.S. Markets

The listing marks a direct entry point for U.S. users into the TRON ecosystem. Binance.US operates as a compliance-first exchange, meeting regulatory standards required in the United States. As a result, TRX now reaches a broader audience through a trusted and licensed platform.

TRON DAO shared the development on its official X account, stating: “Trading is now live with TRX/USD and TRX/USDT pairs, expanding access for Binance.US users.” The post added that the listing strengthens TRX availability within compliant U.S. market infrastructure. It also noted support for enhanced liquidity and broader accessibility across established digital asset markets.

Advertisement

Community Spokesperson Sam Elfarra reinforced the importance of the move in an official statement. “Listing TRX on Binance.US marks an important step in expanding access to the TRON ecosystem in the United States,” he said. Elfarra added that regulated platforms play an increasingly central role in digital asset adoption.

He further noted that broader availability of TRX through compliant exchanges supports wider participation. Long-term ecosystem growth, he said, depends on access through trusted and regulated venues. For U.S. investors, this listing removes a common barrier to entering the TRON network.

Advertisement

The addition of TRX/USD and TRX/USDT pairs also gives traders flexible options. Both pairs cater to different user preferences within the Binance.US platform. This dual-pair structure supports smoother trading activity and tighter market depth.

TRON’s Stablecoin and Payment Ecosystem Gets a Boost

TRON is already known as a leading network for stablecoin transactions. USDT issued on the TRC20 standard remains a core part of its ecosystem. The Binance.US listing further connects this infrastructure to regulated U.S. market participants.

Beyond stablecoins, TRON supports payments, decentralized finance, and digital asset settlement. These use cases make TRX a utility-driven token with real network demand behind it. The listing, therefore, reflects more than just exchange availability — it reflects network relevance.

TRON DAO’s announcement also pointed to enhanced CEX-based liquidity as a key outcome. Greater liquidity on regulated platforms typically attracts more institutional and retail interest. Over time, this can contribute to more stable trading conditions for TRX.

Advertisement

As regulated crypto markets continue to mature in the United States, listings like this carry more weight. They signal that a project is working within established frameworks rather than outside them. For TRON, the Binance.US listing adds another layer to its global market strategy.

Source link

Advertisement
Continue Reading

Crypto World

SEC Charges Donald Basile in $16M Crypto Fraud Over “Insured” Token

Published

on

SEC Charges Donald Basile in $16M Crypto Fraud Over “Insured” Token

The US Securities and Exchange Commission has filed a lawsuit against crypto executive Donald Basile, accusing him and two companies he controlled of raising about $16 million from investors through false claims tied to a so-called “insured” crypto token known as Bitcoin Latinum.

In a complaint filed Friday in the US District Court for the Eastern District of New York, the SEC alleged that Basile ran the scheme between March and December 2021 through Monsoon Blockchain Corp. and GIBF GP Inc., offering investors Simple Agreements for Future Tokens (SAFTs) that promised future delivery of the token, according to a report from The Wall Street Journal.

Regulators said hundreds of investors were told the asset was backed and insured, but the SEC alleged no insurance company ever provided coverage or any proof that these claims were true, per the report.

The case marks one of the few SEC enforcement actions under the Trump administration, which has signaled a more crypto-friendly regulatory stance compared to previous administrations.

Advertisement

Related: Crypto market safe harbor lands at White House for review

Crypto funds spent on luxury

The SEC said Basile repeatedly represented that Bitcoin Latinum was an insured, asset-backed cryptocurrency and that investor funds would help support its underlying value. Instead, the complaint alleges, millions of dollars were diverted to personal spending, including real estate purchases, credit card payments and the acquisition of a $160,000 horse.

The regulator is seeking permanent injunctions, repayment of allegedly ill-gotten gains with interest, civil penalties, and a ban on Basile’s participation in securities offerings, according to the WSJ. It also wants an officer-and-director bar preventing him from leading public companies in the future.

The Bitcoin Latinum website currently shows a 404 error.

Advertisement
Bitcoin Latinum website not working. Source: Bitcoin Latinum

Related: SEC proposes certain crypto interfaces don’t need to register as brokers

SEC criticizes past crypto cases for lacking benefit

Last week, the SEC said many past enforcement actions against crypto firms did not directly benefit investors and reflected a focus on case volume rather than meaningful protection. The agency reported that since fiscal 2022 it brought 95 actions and collected $2.3 billion in penalties for “book-and-record” violations, but several cases involving crypto registration and dealer definitions did not identify clear investor harm.

The SEC also said this approach reflected a misinterpretation of securities laws and a misallocation of enforcement resources. Under Chair Paul Atkins, appointed in 2025, the agency says it has moved away from “regulation by enforcement” and is now prioritizing fraud, market manipulation and serious abuses of trust.

Magazine: Your guide to surviving this mini-crypto winter