Skip to main content
See every side of every news story
Published loading...Updated

The long con: How North Korean spies spent months in-person to drain $285 million from Drift

TRM Labs said the group used months of social engineering and in-person contact to steal $285 million from Drift Protocol in 31 withdrawals.

  • North Korean-linked groups are responsible for 76% of crypto losses in 2026, stealing about $577 million through April, according to a report from TRM Labs released Thursday.
  • The Drift Protocol exploit on April 1 accounted for roughly $285 million in losses, an incident TRMLabs described as an "unprecedented in-person social engineering" attack.
  • Attackers targeted KelpDAO on April 18, exploiting a LayerZero bridge vulnerability to drain about $292 million, a breach TRM Labs attributed to the North Korean-linked TraderTraitor group.
  • After freezing around $75 million on Arbitrum, hackers converted roughly $175 million into Bitcoin, reinforcing THORChain's role as a consistent exit route for stolen assets.
  • Experts now characterize these exploits as "standardised business operations," with Yajin Zhou of BlockSec noting that operational security is now equally critical as protocol code integrity.
Insights by Ground AI

14 Articles

It has been revealed that North Korean hacking groups have led the majority of cryptocurrency hacking damages this year. In a report released on April 30, U.S. blockchain analytics firm TRM Labs stated that approximately 76% of the hacking damages that occurred from the beginning of the year through April stemmed from attacks linked to North Korea.

The hackers linked to North Korea have become the big problem of the crypto sector this year. According to a report by the firm of analysis on-chain TRM Labs, the regime of Pionyang is behind 76% of the total value stolen in attacks on crypto platforms in what we have carried in 2026. In other words: three out of every four dollars that have disappeared in hacks of the sector have gone to the North Korean coffers. The biggest blow was the attack…

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources are Center
100% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

TokenPost broke the news on Thursday, April 30, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal