Ethereum security program flags DPRK-linked actors, recovers $5.8M

An Ethereum-backed security initiative has reported recovering or freezing more than $5.8 million in funds. Also, it identified around 100 suspected North Korean [DPRK] operatives embedded across Web3 projects.

The figures come from the six-month ETH Rangers Program, launched by the Ethereum Foundation in partnership with industry groups. Also, the program funded independent security research and incident response across the ecosystem.

Program surfaces vulnerabilities and active threats

According to the report, participants in the program identified or cataloged more than 785 vulnerabilities, client bugs, and proof-of-concept exploits during the initiative.

The work also included over 36 incident responses, as well as the development of open-source security tools and research frameworks to improve threat detection and mitigation across Ethereum-based applications.

These efforts contributed to direct fund recovery in several cases, including coordinated responses to active exploits, during which assets were traced and frozen.

DPRK-linked infiltration emerges as key concern

One of the more significant findings involved the identification of approximately 100 suspected DPRK-linked IT workers operating within blockchain projects under false identities.

Researchers involved in the program said they engaged with dozens of teams to flag potential infiltrations, with some cases leading to the freezing of funds linked to these actors.

The findings highlight a growing concern within the crypto industry around state-linked threat groups targeting Web3 firms through employment channels, rather than traditional attack vectors alone.

Security efforts expand beyond audits

Beyond vulnerability research, the initiative also focused on education and ecosystem resilience, with contributors delivering workshops, publishing technical research, and engaging hundreds of teams in security-focused exercises.

The results point to a broader shift in how crypto security is approached, combining technical audits with real-time threat intelligence and coordinated incident response.

Final Summary

• The ETH Rangers Program reported over $5.8M in recovered or frozen funds and identified hundreds of vulnerabilities across the Ethereum ecosystem.
• The initiative also flagged around 100 suspected DPRK-linked operatives, underscoring the growing role of state-linked threats in Web3 security.