A hacker group linked to North Korea posed as a quantitative trading firm in a monthslong operation to steal $270 million of digital assets.
This was no overnight operation. The attackers met contributors to the Drift Protocol, a decentralized exchange on the Solana blockchain, in person at events and even deposited more than $1 million of their own assets to gain trust. One malicious app and several compromised devices later, the group notched a top 10 crypto crime.
It took less than a minute to drain the funds—on April 1st, no less.
“They were technically fluent, had verifiable professional backgrounds, and were familiar with how Drift operated,”
the exchange shared in an attack post-mortem.
Fans of
The Big Short might say that you shouldn’t trust a Ryan Gosling type in a pinstripe suit (“
That’s my quant”). But as CoinDesk
rightly asks: Which security model is designed to catch such a long con?
—AN