Investigation into the infiltration of North Korean IT workers in the Crypto Assets industry

A recent survey revealed that several well-known Crypto Assets companies have unknowingly employed IT workers from North Korea. These North Korean employees successfully applied using false identities, passed background checks, and provided seemingly real work experiences.

The investigation found that at least a dozen Crypto Assets companies had inadvertently hired North Korean IT personnel, including well-known projects such as Injective, ZeroLend, Fantom, Sushi, Yearn Finance, and Cosmos Hub.

These North Korean employees often use fake passports and ID cards, showcasing impressive code contribution histories on GitHub. They cleverly hide their true identities through remote work.

In countries like the United States that impose sanctions on North Korea, employing North Korean workers is illegal. This also brings serious security risks, as multiple companies have encountered hacking attacks after hiring North Korean IT personnel.

Famous blockchain developer Zaki Manian stated: "In the entire Crypto Assets industry, the proportion of resumes, job seekers, or contributors from North Korea may exceed 50%. Everyone is working hard to filter these people out."

The investigation also found that many North Korean IT workers send most of their income to blockchain addresses associated with the North Korean regime. According to a United Nations report, North Korean IT workers earn up to $600 million a year for the country.

Some companies stated that they immediately fired employees and conducted security reviews after discovering links to North Korea. However, some companies also acknowledged that the technical skills of certain North Korean employees are indeed very strong.

Experts suggest that crypto companies strengthen background checks and remain vigilant. However, due to the globalized nature of the crypto industry, completely eliminating the infiltration of North Korean IT workers remains a challenge.

This investigation reveals the scale and means of North Korea's infiltration into the encryption industry, raising concerns within the industry about security and compliance issues. In the future, crypto companies may face stricter scrutiny in talent recruitment.