Ethereum Foundation Uncovers 100 North Korean Operatives in Crypto Sector
Ethereum Foundation-funded program exposes 100 DPRK workers in crypto
Cointelegraph
Image: Cointelegraph
The Ethereum Foundation funded a six-month initiative that exposed 100 North Korean operatives infiltrating Web3 companies using fake identities. The project, known as the Ketman Project, aims to enhance operational security within the Ethereum ecosystem amid ongoing threats from North Korean hacking groups.
- 01The Ethereum Foundation's ETH Rangers program funded a project to identify DPRK operatives.
- 02100 North Korean IT workers were found operating in Web3 companies.
- 03The Ketman Project developed a detection tool for suspicious GitHub activities.
- 04North Korean hacking groups, like the Lazarus Group, have stolen billions in crypto.
- 05The project collaborated with the Security Alliance to create a framework for identifying DPRK workers.
Advertisement
In-Article Ad
The Ethereum Foundation has revealed that its ETH Rangers initiative funded a six-month project, the Ketman Project, which identified 100 North Korean operatives infiltrating Web3 companies under false identities. Launched in late 2024, the project aims to bolster security within the Ethereum ecosystem, which has been threatened by North Korean hacking activities, notably from groups like the Lazarus Group. The Ketman Project reached out to 53 projects to inform them about the presence of these operatives. It developed an open-source detection tool to identify suspicious activities on GitHub and co-authored a framework with the Security Alliance, a blockchain-focused nonprofit, to help pinpoint DPRK IT workers. The project highlighted various tactics used by these operatives, including reusing avatars and exposing unlinked email addresses during screen sharing. This initiative addresses a significant operational security threat in the crypto sector, where North Korean hackers have been responsible for billions in stolen assets.
Advertisement
In-Article Ad
This initiative enhances security measures within the Ethereum ecosystem, potentially protecting assets and user data from North Korean hacking threats.
Advertisement
In-Article Ad
Reader Poll
Do you believe more initiatives are needed to secure the crypto sector from foreign operatives?
Connecting to poll...
More about Ethereum Foundation
Read the original article
Visit the source for the complete story.






