Blockchain investigator ZachXBT has exposed a sophisticated operation involving five North Korean IT workers who created over 30 fake identities to infiltrate cryptocurrency projects.
The operatives used fabricated government IDs and purchased professional accounts on platforms like Upwork and LinkedIn to gain access to codebases and internal systems.
Evidence from a breached device revealed their meticulous process, including purchasing Social Security numbers and using scripted personas to appear legitimate.
The investigation linked one of their salary wallets to the $680,000 Favrr exploit from June 2025, confirming that the project’s developers were part of the network.
The revelation has prompted internal probes within several crypto projects and highlights a growing operational hazard for the industry, as North Korean-linked groups continue to exploit vulnerabilities to funnel funds back to the regime.
Image Credit: Pixabay
Keep in mind that we may receive commissions when you click our links and make purchases. However, this does not impact our reviews and comparisons. We try our best to keep things fair and balanced, in order to help you make the best choice for you.
