• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • About TronWeekly
  • Write for us
  • Terms and Conditions
  • Privacy Policy
  • Disclaimer
  • Contact
  • All Posts
  • Advertise

TronWeekly

Crypto World News

  • Home
  • Latest News
  • Opinion
    • Education
    • Best TRON Wallets
    • Beginner’s guide to TRON
    • Tron Tokens
    • Market Analysis
  • Industry
    • Tron Exchange
    • Project Review
  • Press Release
  • Bitcoin (BTC)
  • Ripple (XRP)
  • Advertise
  • About TronWeekly
    • The Team
    • Editorial Policy
    • Write for us
    • Privacy Policy
    • Disclaimer
    • Terms and Conditions
    • Contact
You are here: Home / Cryptocurrency News / Pepe NFT Projects Hacked by North Korean Operative Steals Over $1 Million

Pepe NFT Projects Hacked by North Korean Operative Steals Over $1 Million

By Zagham Abbas | Edited By Messam Raza,June 28, 2025, 9:30 PM

pepe
  • Pepe NFT projects hacked, over $1M stolen by North Korean operative posing as IT staff at Chainsaw and CTO at Favrr.
  • Matt Furie’s Replicandy collection was compromised after a hacker hijacked the minting contract and crashed floor prices.
  • Lazarus Group suspected, with blockchain analyst ZachXBT linking the attack to North Korean crypto laundering methods.

Pepe NFT projects linked to original Pepe the Frog creator Matt Furie have suffered a devastating cyberattack, reportedly orchestrated by North Korean hackers. The breach, which resulted in over $1 million in losses, has shaken the NFT community and exposed serious security gaps in Web3 project management.

1/ Multiple projects tied to Pepe creator Matt Furie & ChainSaw as well as another project Favrr were exploited in the past week which resulted in ~$1M stolen

My analysis links both attacks to the same cluster of DPRK IT workers who were likely accidentally hired as developers. pic.twitter.com/85JRm5kLQO

— ZachXBT (@zachxbt) June 27, 2025

The incident centers around Matt Furie, the visual artist who created the widely recognized Pepe character over two decades ago. While Furie has publicly distanced himself from the meme coin movement that adopted his artwork without consent, he recently sought to enter the NFT space on his terms. Partnering with Chainsaw, an NFT startup, Furie helped launch several official Pepe NFT collections, including one called Replicandy.

However, according to leading blockchain investigator ZachXBT, that partnership turned disastrous after Chainsaw inadvertently hired a North Korean operative for a key IT role. The hacker, posing as a legitimate candidate, was granted back-end access.

In a stealth move executed during off-hours, the individual transferred the minting contract for Replicandy, a critical control point that allowed them to mint countless NFTs and tank the floor price of the collection.

The same hacker repeated this attack on three other Chainsaw-backed NFT collections, ultimately draining around $310,000. Just days later, a similar breach hit another NFT platform, Favrr, resulting in $680,000 in losses. This time, the infiltrator had been hired as Favrr’s Chief Technology Officer, highlighting a severe lack of background checks and basic operational security.

10/ DPRK ITW consolidation 0x477 received payroll from the project Favrr which was exploited for $680K+ on June 25, 2025

I suspect they have a second ITW on payroll as well because the exploiter address is tied to a Gate deposit address 0xab7 which ITW 2 sent payroll to.

Favrr… https://t.co/mRRYNgj7kl pic.twitter.com/1KKDNwGsID

— ZachXBT (@zachxbt) June 27, 2025

Also Read: Pepe Price Prediction, Next 100x Memecoin: Can Pepe Recover in July 2025?

Chainsaw Silent After Pepe NFT Breach

By analyzing transaction patterns and laundering methods on the blockchain, ZachXBT traced the attacks back to a small group linked to North Korea, likely associated with the infamous Lazarus Group, which has previously been responsible for some of the largest hacks in crypto history.

8/ Other indicators revealed from internal logs point out irregularities in a suspected DPRK IT workers resume.

Why would a developer who claims to be living in the US have a Korean language setting, Astral VPN usage, and have an Asia/Russia time zone?

— ZachXBT (@zachxbt) June 27, 2025

Despite the scale of the damage, Chainsaw and Matt Furie have remained largely silent. Chainsaw briefly posted a warning to its social media channels before deleting it. Furie has issued no statement and has disabled his direct messages on X (formerly Twitter). In contrast, Favrr has at least acknowledged the breach publicly.

This series of attacks not only underscores the growing threat of state-sponsored crypto crime but also serves as a wake-up call to NFT creators and blockchain firms. In an increasingly high-stakes environment, basic due diligence, robust hiring practices, and multi-layered security protocols are no longer optional; they are essential.

With Pepe NFT projects now caught in the crossfire, this incident serves as both a cautionary tale and a stark reminder that the human element remains the biggest vulnerability in Web3.

Also Read | PEPE Shows Potential: Bullish Momentum Builds Toward $0.000016 Area

Filed Under: Cryptocurrency News, Altcoin News

About Zagham Abbas

Zagham Abbas is a Blockchain Infrastructure Reporter at Tron Weekly with over five years of experience covering cryptocurrency markets, blockchain infrastructure, and digital asset regulation. His reporting focuses on core blockchain networks, protocol-level developments, decentralized finance ecosystems, and major assets such as Bitcoin, Ethereum, and altcoins.
Zagham covers network upgrades, protocol changes, scalability developments, security incidents, and ecosystem adoption across leading blockchain platforms. He also provides market analysis, explaining how infrastructure updates and regulatory actions impact digital asset markets. His work delivers clear, fact-based reporting for both beginners and experienced readers. He holds a Bachelor of Arts degree and follows strict editorial and fact-checking standards at Tron Weekly.

Primary Sidebar

Recent Posts

  • AI-Driven Crypto Scam Causes 73-Year Victim to Loose $300,000 April 29, 2026
  • Filecoin (FIL) Breaks Out of Falling Wedge: Is a Major Rally to $11.40 Next? April 29, 2026
  • BNB Chain Sees 20x Growth in Tokenized Equities in 2026 April 29, 2026
  • Global Crypto Crackdown Intensifies as AML Rules Dominate Regulatory Era April 29, 2026
  • MTL Price Analysis Signals Breakout Toward $0.311 April 29, 2026

Footer

News

  • Latest News
  • Altcoin News
  • Bitcoin (BTC)
  • Blockchain
  • Tron (TRX)
  • World

Digest

  • Meet the Founder
  • Price Winning Article
  • DeFi
  • Cyber Security
  • Crypto Scam

Industry

  • Project Review
  • Technology
  • Fintech
  • Tron Exchange
  • New in Town

Tron Universe

  • Event and Tron Parties
  • New in Town
  • Tron Tokens

FOLLOW US

  • Facebook
  • Telegram
  • Twitter
  • Linkedin

Subscribe US

Editorial Policy | Privacy Policy | Disclaimer | Terms and Conditions | Masthead

Copyright © 2026 · Tron Weekly. All Rights Reserved. NOTE: Tron Weekly is an independent crypto news site that adheres to the strict journalism policy anchored on transparency, trust, and objectivity, we have no affiliation with the TRON Foundation, its founder Justin Sun or any other cryptocurrency firm.