Cryptocurrency Industry's Espionage War Escalates: 40% of Job Applicants Allegedly North Korean Agents?
Original Title: North Korean crypto infiltration is much worse than everyone thinks, says SEAL member
Original Author: Pedro Solimano, DL News
Original Translation: Deep Tide TechFlow
North Korean operatives have already infiltrated 15%-20% of crypto companies.
According to a SEAL member, 30%-40% of job applications in the crypto industry may originate from North Korean operatives.
The crypto industry has been criticized for having "the worst operational security (opsec) in the entire computer industry," said Pablo Sabbatella.
The extent of North Korea's infiltration into the crypto industry is far beyond people's awareness.
Pablo Sabbatella, founder of the Web3 audit company Opsek and current Security Alliance member, dropped a bombshell at the Devconnect conference in Buenos Aires: North Korean operatives may have infiltrated up to 20% of crypto companies.
"The situation in North Korea is much worse than everyone imagines," Sabbatella told DL News in an interview. He even shockingly pointed out that 30%-40% of job applications in the crypto industry may come from North Korean operatives trying to infiltrate relevant organizations in this way.
If these estimates are true, their potential for disruption would be incredibly high.
More importantly, North Korea's infiltration is not just about stealing funds through hacking techniques, although they have already stolen billions through sophisticated malware and social engineering tactics. The bigger issue is that these operatives will be hired by legitimate companies, gain system permissions, and manipulate the infrastructure supporting major crypto companies.
According to a report from the U.S. Treasury Department in November of last year, North Korean hackers have stolen over $3 billion in cryptocurrency over the past three years. These funds were subsequently used to support Pyongyang's nuclear weapons program.
How Do North Korean Operatives Infiltrate the Crypto Industry?
North Korean workers typically do not directly apply for positions because international sanctions prevent them from participating in the recruitment process under their true identities.
On the contrary, they will seek uninformed global remote workers to act as "agents." Some of these agents have even transitioned into recruiters, helping North Korean operatives use stolen identities to hire more overseas collaborators.
According to a recent report by Security Alliance, these recruiters reach out to individuals worldwide through freelance platforms (such as Upwork and Freelancer), with a focus mainly on Ukraine, the Philippines, and other developing countries.
Their "transaction" is quite simple: they provide verified account credentials or allow North Korean operatives to remotely use your identity. In return, collaborators can receive 20% of the income, while the North Korean operatives retain 80%.
Sabbatella stated that many North Korean hackers target the United States.
"Their approach is to find Americans to be their 'front end,'" Sabbatella explained, "They will pretend to be from China, unable to speak English, needing someone to help with interviews."
They will then infect the "front end" individual's computer with malware to obtain a US IP address, allowing them to access more internet resources than when in North Korea.
Once hired, these hackers are usually not dismissed because their performance satisfies the company.
"They are highly efficient, work long hours, and never complain," Sabbatella said in an interview with DL News.
Sabbatella provided a simple test method: "Ask them if they think Kim Jong Un is weird or has any flaws." He said, "They are not allowed to say anything negative."
Operational Security Vulnerabilities
However, North Korea's success does not solely rely on sophisticated social engineering.
Cryptocurrency companies—and users—have made it all easier.
"The cryptocurrency industry may be the worst in operational security (opsec) in the entire computer industry," Sabbatella said. He criticized that the founders of cryptocurrency companies are "fully doxxed, perform poorly in protecting private keys, and are easily susceptible to social engineering."
Operational Security (OPSEC) is a systematic process used to identify and protect key information from adversary threats.
The lack of operational security can lead to a high-risk environment. "Almost everyone's computer will be infected with malware at least once in their lifetime," Sabbatella said.
Update Statement
Update: This article has been updated to reflect Sabbatella's clarification that North Korea does not control 30%-40% of crypto applications; this percentage actually refers to the proportion of North Korean operatives in crypto industry job applications.
You may also like

Crypto Price Prediction Today 18 February – XRP, Bitcoin, Ethereum
Key Takeaways XRP’s potential as a replacement for SWIFT is bolstered by regulatory approvals, potentially driving its price…

XRP Price Prediction: XRP is Outpacing Solana and Targeting Binance Coin Next – Should You Invest Now?
Key Takeaways XRP Ledger has moved into the sixth place by tokenized real-world asset value, surpassing Solana and…

New AI Predicts the Price of XRP, Dogecoin, and Solana By 2026
Key Takeaways ChatGPT anticipates significant price increases for XRP, Dogecoin, and Solana by the end of 2026. XRP…

Arthur Hayes Shares Two Scenarios for Bitcoin Price, Calling for a Major Crypto Rally
Key Takeaways Arthur Hayes predicts a significant crypto rally fueled by a $572 billion liquidity injection from the…

Bitcoin Price Prediction: Abu Dhabi Gov Funds Buy $1 Billion in BTC – What Do They Know?
Key Takeaways Abu Dhabi has revealed a $1 billion stake in Bitcoin through major ETF investments, signaling strong…

Bitcoin’s Divergence From Nasdaq Signals Dollar Liquidity Risk, Says Arthur Hayes
Key Takeaways Arthur Hayes highlights a concerning divergence between Bitcoin and the Nasdaq, pointing to a potential dollar…

Lagarde’s Possible Early Exit Could Alter Digital Euro Plans and Stablecoin Oversight
Key Takeaways Christine Lagarde’s potential departure as ECB president may disrupt the digital euro timeline and stablecoin policies.…

HYLQ Strategy Invests in Hyperliquid Quantum Solutions Pioneer qLABS, Acquires 18,333,334 qONE Tokens
Key Takeaways HYLQ Strategy Corp has made a strategic investment in qLABS, purchasing over 18 million qONE tokens…

WLFI Crypto Surges Toward $0.12 as Whale Purchase Precedes Trump-Linked Forum
Key Takeaways Whale accumulation has spurred a rally in WLFI crypto prices, reaching towards $0.12 ahead of a…

Cathie Wood Reverses Path with $6.9 Million Purchase in Coinbase Stock – Is ARK Strategizing a Rebound?
Key Takeaways ARK Invest acquires 41,453 shares of Coinbase, showing renewed interest post recent divestment. This acquisition by…

Crypto Lobby Establishes Working Group to Advocate for Prediction Market Regulatory Clarity
Key Takeaways The Digital Chamber announced the Prediction Markets Working Group to promote federal oversight of prediction markets.…

Peter Thiel Discreetly Withdraws from Ethereum Treasury Venture ETHZilla – A Cautionary Note for the DAT Model?
Key Takeaways Peter Thiel and Founders Fund have completely exited their position in ETHZilla. Thiel’s withdrawal raises questions…

Coin Center Advocates Protecting Crypto Developer Liability
Key Takeaways Coin Center is actively lobbying the U.S. Senate to safeguard crypto developer liability protections. The ongoing…

$150B in US Tax Refunds Could Catalyze Fresh Crypto Inflows, Historical Trends Indicate
Key Takeaways The IRS anticipates distributing approximately $150 billion in tax refunds to U.S. consumers by the end…

Oracle Error Leads DeFi Lender Moonwell to $1.8 Million in Bad Debt
Key Takeaways A critical oracle pricing glitch caused Moonwell to incur nearly $1.8 million in bad debt. The…

Crypto Price Prediction Today 18 February – XRP, Solana, Dogecoin
Key Takeaways XRP targets a $5 move, driven by its role as an alternative to SWIFT for cross-border…

China’s DeepSeek AI Predicts the Price of XRP, PEPE, and Shiba Inu By the End of 2026
Key Takeaways DeepSeek AI suggests significant potential price increases for XRP, PEPE, and Shiba Inu by 2026. XRP…

XRP Battles Key Support Amid Grayscale Sentiment Surge
Key Takeaways XRP has experienced a 29% price drop recently, creating a tense atmosphere among traders eyeing key…
Crypto Price Prediction Today 18 February – XRP, Bitcoin, Ethereum
Key Takeaways XRP’s potential as a replacement for SWIFT is bolstered by regulatory approvals, potentially driving its price…
XRP Price Prediction: XRP is Outpacing Solana and Targeting Binance Coin Next – Should You Invest Now?
Key Takeaways XRP Ledger has moved into the sixth place by tokenized real-world asset value, surpassing Solana and…
New AI Predicts the Price of XRP, Dogecoin, and Solana By 2026
Key Takeaways ChatGPT anticipates significant price increases for XRP, Dogecoin, and Solana by the end of 2026. XRP…
Arthur Hayes Shares Two Scenarios for Bitcoin Price, Calling for a Major Crypto Rally
Key Takeaways Arthur Hayes predicts a significant crypto rally fueled by a $572 billion liquidity injection from the…
Bitcoin Price Prediction: Abu Dhabi Gov Funds Buy $1 Billion in BTC – What Do They Know?
Key Takeaways Abu Dhabi has revealed a $1 billion stake in Bitcoin through major ETF investments, signaling strong…
Bitcoin’s Divergence From Nasdaq Signals Dollar Liquidity Risk, Says Arthur Hayes
Key Takeaways Arthur Hayes highlights a concerning divergence between Bitcoin and the Nasdaq, pointing to a potential dollar…