Back to Home
Finance2026-05-01

The long con: How North Korean spies spent months in-person to drain $285 million from Drift

The security intelligence research firm said North Korean-state-backed hackers account for 76% of all crypto scam and hack losses in 2026 and have stolen $6 billion since 2017.

By CoinDesk

The long con: How North Korean spies spent months in-person to drain $285 million from Drift

A devastating security report has revealed that North Korean-state-backed hackers spent months operating 'in-person' to infiltrate and drain $285 million from the crypto platform Drift. The 'long con' involved spies using fake identities to gain employment at various crypto firms, allowing them to bypass traditional digital defenses. This incident is part of a broader trend where North Korean actors now account for 76% of all global crypto scam and hack losses, totaling $6 billion since 2017.

The security intelligence firm behind the report warned that the crypto industry's focus on decentralized protocols has created a blind spot for 'human-layer' attacks. The Drift exploit has sent shockwaves through the DeFi sector, highlighting the extreme vulnerability of platforms to insider threats. As regulators move to tighten oversight of crypto hiring practices, this case serves as a stark reminder of the sophisticated and persistent nature of state-sponsored cybercrime in the digital age.