Cryptocurrency Industry's Espionage War Escalates: 40% of Job Applicants Allegedly North Korean Agents?
Original Title: North Korean crypto infiltration is much worse than everyone thinks, says SEAL member
Original Author: Pedro Solimano, DL News
Original Translation: Deep Tide TechFlow
North Korean operatives have already infiltrated 15%-20% of crypto companies.
According to a SEAL member, 30%-40% of job applications in the crypto industry may originate from North Korean operatives.
The crypto industry has been criticized for having "the worst operational security (opsec) in the entire computer industry," said Pablo Sabbatella.
The extent of North Korea's infiltration into the crypto industry is far beyond people's awareness.
Pablo Sabbatella, founder of the Web3 audit company Opsek and current Security Alliance member, dropped a bombshell at the Devconnect conference in Buenos Aires: North Korean operatives may have infiltrated up to 20% of crypto companies.
"The situation in North Korea is much worse than everyone imagines," Sabbatella told DL News in an interview. He even shockingly pointed out that 30%-40% of job applications in the crypto industry may come from North Korean operatives trying to infiltrate relevant organizations in this way.
If these estimates are true, their potential for disruption would be incredibly high.
More importantly, North Korea's infiltration is not just about stealing funds through hacking techniques, although they have already stolen billions through sophisticated malware and social engineering tactics. The bigger issue is that these operatives will be hired by legitimate companies, gain system permissions, and manipulate the infrastructure supporting major crypto companies.
According to a report from the U.S. Treasury Department in November of last year, North Korean hackers have stolen over $3 billion in cryptocurrency over the past three years. These funds were subsequently used to support Pyongyang's nuclear weapons program.
How Do North Korean Operatives Infiltrate the Crypto Industry?
North Korean workers typically do not directly apply for positions because international sanctions prevent them from participating in the recruitment process under their true identities.
On the contrary, they will seek uninformed global remote workers to act as "agents." Some of these agents have even transitioned into recruiters, helping North Korean operatives use stolen identities to hire more overseas collaborators.
According to a recent report by Security Alliance, these recruiters reach out to individuals worldwide through freelance platforms (such as Upwork and Freelancer), with a focus mainly on Ukraine, the Philippines, and other developing countries.
Their "transaction" is quite simple: they provide verified account credentials or allow North Korean operatives to remotely use your identity. In return, collaborators can receive 20% of the income, while the North Korean operatives retain 80%.
Sabbatella stated that many North Korean hackers target the United States.
"Their approach is to find Americans to be their 'front end,'" Sabbatella explained, "They will pretend to be from China, unable to speak English, needing someone to help with interviews."
They will then infect the "front end" individual's computer with malware to obtain a US IP address, allowing them to access more internet resources than when in North Korea.
Once hired, these hackers are usually not dismissed because their performance satisfies the company.
"They are highly efficient, work long hours, and never complain," Sabbatella said in an interview with DL News.
Sabbatella provided a simple test method: "Ask them if they think Kim Jong Un is weird or has any flaws." He said, "They are not allowed to say anything negative."
Operational Security Vulnerabilities
However, North Korea's success does not solely rely on sophisticated social engineering.
Cryptocurrency companies—and users—have made it all easier.
"The cryptocurrency industry may be the worst in operational security (opsec) in the entire computer industry," Sabbatella said. He criticized that the founders of cryptocurrency companies are "fully doxxed, perform poorly in protecting private keys, and are easily susceptible to social engineering."
Operational Security (OPSEC) is a systematic process used to identify and protect key information from adversary threats.
The lack of operational security can lead to a high-risk environment. "Almost everyone's computer will be infected with malware at least once in their lifetime," Sabbatella said.
Update Statement
Update: This article has been updated to reflect Sabbatella's clarification that North Korea does not control 30%-40% of crypto applications; this percentage actually refers to the proportion of North Korean operatives in crypto industry job applications.
You may also like

U.S. Oil (USOR) Price Prediction 2026–2030
Key Takeaways U.S. Oil (USOR) is a speculative Solana-based crypto project that aims to index the United States…

USOR Surges on Meme Narrative Despite No Real-World Asset Backing
Key Takeaways: USOR, a Solana-based token, has seen a notable surge driven by speculative narratives rather than verifiable…

How to Buy U.S. Oil Reserve (USOR) Cryptocurrency
Key Takeaways U.S. Oil Reserve (USOR) is a Solana-based token primarily traded on decentralized exchanges (DEXs). Claims have…

USOR vs Oil ETFs: Understanding Why the ‘Oil Reserve’ Token Doesn’t Track Crude Prices
Key Takeaways The U.S. Oil Reserve (USOR) token has become noteworthy for its claims, yet it does not…

Trend Research Reduces Ether Holdings After Major Market Turbulence
Key Takeaways: Trend Research has significantly cut down its Ether holdings, moving over 404,000 ETH to exchanges recently.…

Investors Channel $258M into Crypto Startups Despite $2 Trillion Market Sell-Off
Key Takeaways: Investors pumped approximately $258 million into crypto startups in early February, highlighting continued support for blockchain-related…

NBA Star Giannis Antetokounmpo Becomes Shareholder in Prediction Market Kalshi
Key Takeaways: Giannis Antetokounmpo, the NBA’s two-time MVP, invests in the prediction market platform Kalshi as a shareholder.…

Arizona Home Invasion Targets $66 Million in Cryptocurrency: Two Teens Charged
Key Takeaways Two teenagers from California face serious felony charges for allegedly attempting to steal $66 million in…

El Salvador’s Bukele Approval Reaches Record 91.9% Despite Limited Bitcoin Use
Key Takeaways: El Salvador President Nayib Bukele enjoys a record high approval rating of 91.9% from his populace,…

Crypto Price Prediction for February 6: XRP, Dogecoin, and Shiba Inu’s Market Movements
Key Takeaways: The crypto market experienced a notable shift with Bitcoin’s significant surge, impacting altcoins like XRP, Dogecoin,…

China Restricts Unapproved Yuan-Pegged Stablecoins to Maintain Currency Stability
Key Takeaways: China’s central bank and seven government agencies have banned the issuance of yuan-pegged stablecoins abroad without…

Solana Price Prediction: $80 SOL Looks Scary – But Smart Money Just Signaled This Might Be the Bottom
Key Takeaways Despite Solana’s descent to $80, some traders find security as smart money enters the fray, suggesting…

XRP Price Prediction: Major Ledger Upgrade Quietly Activated – Why This Could Be the Most Bullish Signal Yet
Key Takeaways: The activation of the Permissioned Domains amendment on XRPL represents a significant development in XRP’s potential…

Dogecoin Price Prediction: Death Cross Confirmed as DOGE Falls Below $0.10 – Is DOGE Reaching Zero?
Key Takeaways The death cross event signals potential bearish trends for Dogecoin as its price dips under $0.10,…

Stablecoin Inflows Have Doubled to $98B Amid Selling Pressure
Key Takeaways Stablecoin inflows to crypto exchanges have surged to $98 billion, doubling previous levels amidst heightened market…

Coinbase UK Executive Declares Tokenised Collateral a Mainstream Financial Force
Key Takeaways Tokenised collateral is transitioning from its initial experimental stages into becoming core infrastructure within financial markets.…

Best Crypto to Buy Now February 6 – XRP, Solana, Bitcoin
Key Takeaways The cryptocurrency market witnesses volatility amid a technology-sector selloff, but opportunities still exist for keen investors.…

Why Is Crypto Down Today, February 6, 2026
Key Takeaways The global cryptocurrency market has seen an 8% decline in the last 24 hours, standing at…
U.S. Oil (USOR) Price Prediction 2026–2030
Key Takeaways U.S. Oil (USOR) is a speculative Solana-based crypto project that aims to index the United States…
USOR Surges on Meme Narrative Despite No Real-World Asset Backing
Key Takeaways: USOR, a Solana-based token, has seen a notable surge driven by speculative narratives rather than verifiable…
How to Buy U.S. Oil Reserve (USOR) Cryptocurrency
Key Takeaways U.S. Oil Reserve (USOR) is a Solana-based token primarily traded on decentralized exchanges (DEXs). Claims have…
USOR vs Oil ETFs: Understanding Why the ‘Oil Reserve’ Token Doesn’t Track Crude Prices
Key Takeaways The U.S. Oil Reserve (USOR) token has become noteworthy for its claims, yet it does not…
Trend Research Reduces Ether Holdings After Major Market Turbulence
Key Takeaways: Trend Research has significantly cut down its Ether holdings, moving over 404,000 ETH to exchanges recently.…
Investors Channel $258M into Crypto Startups Despite $2 Trillion Market Sell-Off
Key Takeaways: Investors pumped approximately $258 million into crypto startups in early February, highlighting continued support for blockchain-related…