Ketman, a security research project funded by the Ethereum Foundation, reported that it has identified about a hundred North Korean IT workers who are probably involved in hacking crypto and blockchain projects. This discovery reveals the increased cybersecurity and compliance risks that Web3 teams face when they go for remote hiring and have contributors who remain anonymous. As decentralized development grows, threat intelligence programs will have a vital role in supporting the ecosystem.
Scope of Ketman’s Investigation
Ketman reported that about 100 individuals believed to be North Korean IT workers gained employment in several crypto projects. These employees reportedly focus on technical roles in smart contract development, infrastructure, and support, thereby obtaining access to codebases and internal systems.
Ketman is partially funded by the Ethereum Foundation, and its main activity is to track state-linked behavior in open-source and decentralized environments. This large-scale operation appears to be a well-organized plan rather than a few isolated incidents, thereby generating supply chain security and insider threat issues.
Also Read: Bitcoin Faces $75,846 Test as Momentum Weakens Amid Controlled Pullback
Risks to Blockchain and DeFi Infrastructure
The entry of suspected nation-state actors in digital asset platforms, DeFi protocols, and Layer-1 networks can pose various risks. Possible problems include committing malicious code, theft of intellectual property, and non-compliance with sanctions.
If exchanges, custodians, and DAOs are connected to forbidden entities, they will be subject to operational and regulatory risks. Therefore, the implementation of enhanced contributor vetting, smart wallet screening, and blockchain analytics is being considered as necessary risk controls in permissionless environments capable of mitigating such threats.
Also Read: Ethereum Struggles at $2,380 Level as Bulls Aim for $2,800 Upside Target
Industry’s Mitigation and Compliance Response
Some organizations have raised their bar for due diligence with identity verification, background checks, and multi-signature code reviews. The Ethereum Foundation and other security-oriented organizations provide financial support for the development of auditing tools and reputation systems.
There is potential to create decentralized identity systems that not only protect users’ privacy but also ensure their accountability. However, it is still difficult to enforce uniform standards for globally dispersed teams while maintaining open source collaboration without any compromises.
Also Read: Shocking Crypto Scam: Plymouth Man Loses $37,000 in Devastating Fraud Trap
