At the Black Hat security conference, Vangelis Stykas, a security researcher from Greece, revealed that he had infiltrated the server cluster of a North Korean hacking group for about 22 months. In that time, he said, the group broke into 1,640 companies across 57 countries. Between 700 and 800 of those companies sustained serious breaches. The targets included two crypto firms: Coinbase and Uniswap Labs. Stykas said the hackers lured software developers with fake job postings offering high salaries, then tricked them into downloading malicious programs. That method let the group steal cryptocurrency private keys and wallet access permissions. A Chainalysis report cited in the coverage found that North Korean hackers took at least $2.02 billion in crypto assets in 2025, bringing the cumulative figure to $6.75 billion. Coinbase issued a response: it had already terminated the contract of the worker involved and has not found evidence linking that individual to the North Korean government. The findings were first reported by CoinPost.
At Black Hat, Greek security researcher Vangelis Stykas said he spent about 22 months inside the server cluster of a North Korean hacking group. His investigation found the group had compromised 1,640 companies in 57 countries. Of those, 700 to 800 suffered serious intrusions. The target list included Coinbase and Uniswap Labs.
Stykas described an operation built around fake recruiting. The hackers posted high-paying job offers, then tricked software developers into downloading malicious programs. Once installed, the malware gave them access to cryptocurrency private keys and wallet credentials.
A Chainalysis report puts 2025 losses from North Korean hacks at $2.02 billion at least, with cumulative stolen assets reaching $6.75 billion.
Coinbase said it had already cut ties with the contract worker involved and found no evidence linking that person to the North Korean government.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
