Security researcher Taylor Monahan claims North Korean IT workers have infiltrated more than 40 decentralized finance platforms, with the $280 million Drift Protocol exploit last week being the latest operation tied to the network.
Security researcher Taylor Monahan disclosed Sunday that North Korean agents have been embedded inside more than 40 decentralized finance platforms for nearly a decade. The claim connects the $280 million Drift Protocol exploit last week to a broader network of North Korean IT workers operating inside some of crypto’s largest projects. Monahan attributed the coordinated operations to what security researchers have linked to the Lazarus Group, a state-sponsored hacking organization.
The revelation indicates a sustained infiltration campaign targeting DeFi infrastructure rather than isolated attacks. According to NCC Group research cited in reporting on the matter, similar attack patterns have been attributed to North Korean threat actors operating against the crypto sector for more than a decade. The discovery raises questions about operational security practices across major DeFi protocols and the extent of undetected compromises within the ecosystem.
Sources: Taylor Monahan (@tayvano_) on X | Bitcoinist | NCC Group Research
This article was generated automatically by The Defiant’s AI news system from publicly available sources.
Source: https://thedefiant.io/news/security/north-korean-agents-defi-platforms-drift-protocol-sxz326








