07.04.2026 13:47
Security researcher Taylor Monahan revealed that North Korean actors have been embedded in more than forty decentralized finance (DeFi) platforms for almost ten years. The latest evidence links this long‑term campaign to the $280 million exploit on Drift Protocol that occurred just last week.
Monahan’s findings suggest that the breach is not an isolated incident but part of a coordinated effort by North Korean information technology specialists. He points to the Lazarus Group—a state‑backed hacking organization—as the likely driver behind these operations. The claim underscores a persistent strategy of infiltrating DeFi infrastructure rather than executing sporadic attacks.
Research from a prominent cybersecurity firm supports this assessment, noting that similar attack signatures have been traced back to North Korean threat actors targeting the crypto industry for more than a decade. This revelation raises significant concerns about the operational security of major DeFi protocols and how many vulnerabilities may remain undiscovered within the ecosystem.
