The Ethereum Foundation has revealed a major security threat inside the crypto industry. A six-month program backed by the group has identified around 100 NorthThe Ethereum Foundation has revealed a major security threat inside the crypto industry. A six-month program backed by the group has identified around 100 North

Ethereum Foundation Exposes 100 North Korean Crypto Spies

2026/04/17 16:21
3 min read
For feedback or concerns regarding this content, please contact us at crypto.news@mexc.com

The Ethereum Foundation has revealed a major security threat inside the crypto industry. A six-month program backed by the group has identified around 100 North Korean operatives working inside Web3 companies.

This effort was part of the ETH Rangers Program. The goal was simple. It aimed to improve security across the Ethereum ecosystem. But the findings show a deeper problem. Fake developers linked to North Korean groups had quietly entered real teams.

Six-Month Program Exposes Hidden Threat

The Ethereum Foundation supported independent researchers to study risks in the ecosystem. One key effort, called the Ketman Project, focused on tracking suspicious developer activity. Over time, the project uncovered about 100 individuals linked to North Korean operations. These operatives used fake identities to join crypto teams. 

In many cases, companies did not know who they were hiring. The investigation also flagged 53 projects. These teams may have unknowingly worked with these individuals. As a result, the Ethereum Foundation called this one of the most serious security risks today.

Millions Recovered and Hundreds of Risks Found

The program did more than just identify threats. It also helped protect funds and improve systems. Across all efforts, over $5.8 million in assets were recovered or frozen. In addition, researchers reported more than 785 vulnerabilities. These included bugs, weak points and attack risks across different platforms. 

This shows how wide the security challenge has become. The Ethereum Foundation also supported tools and training. Teams created new systems to detect fake profiles. They also shared knowledge to help others stay safe from North Korean infiltration tactics.

How Fake Developers Infiltrated Web3 Teams

The North Korean operatives used smart tactics. They applied for jobs as remote developers. They built strong profiles and passed interviews. Once inside, they gained access to systems and sensitive data. Because Web3 teams often hire globally, this risk increases. 

Many companies rely on online profiles and freelance platforms. This makes it easier for fake identities to slip through. To fight this, the Ketman Project worked with security groups to build a detection framework. This tool helps teams spot unusual behavior and patterns. It is now becoming a key resource for the industry.

Ethereum Foundation Calls for Stronger Security Measures

The Ethereum Foundation has made its position clear. Security must improve as the ecosystem grows. The group believes that decentralized systems need decentralized defense. This means more awareness, better tools and stronger hiring checks. It also means teams must stay alert to evolving threats, especially those linked to North Korean actors.

For now, the findings serve as a warning. The threat is real and it is already inside the system. However, with better coordination and tools, the industry can respond. As Web3 expands, security will remain a top priority. The Ethereum Foundation’s latest report shows that protecting the ecosystem requires constant effort and global cooperation.

The post Ethereum Foundation Exposes 100 North Korean Crypto Spies appeared first on Coinfomania.

Market Opportunity
Major Logo
Major Price(MAJOR)
$0.06469
$0.06469$0.06469
+1.87%
USD
Major (MAJOR) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

USD1 Genesis: 0 Fees + 12% APR

USD1 Genesis: 0 Fees + 12% APRUSD1 Genesis: 0 Fees + 12% APR

New users: stake for up to 600% APR. Limited time!