A North Korean state group just pulled off one of the most sophisticated crypto hacks in history. Drift Protocol lost $270 million after a six-month infiltration.

The attackers posed as a quant trading firm. They met Drift's team at crypto conferences, joined working groups, and even deposited over $1 million into the protocol. For months, everything looked normal.

Then they struck. Two Drift contributors unknowingly downloaded malware—one via a fake wallet app, the other through a VSCode exploit. With access to multisig wallets, the hackers drained the funds in under a minute.

This wasn't random. The group, known as UNC4736 or AppleJeus, is linked to North Korean intelligence. They've done this before—building fake identities, attending events, and waiting months before attacking.

The takeaway? Traditional security like multisig isn't enough if attackers can compromise the people behind it. For traders, this is a wake-up call: even trusted protocols can be breached from the inside.

If you're holding assets on DeFi platforms, double-check security practices. And remember—if something looks too perfect, it might be a setup.

, ,