Diesen Artikel teilen

North Korea's Lazarus Hackers Blamed in deBridge Finance Cyberattack

Company co-founder Alex Smirnov warns all Web3 teams that the campaign is likely widespread.

(Ilya Pavlov/unsplash)
(Ilya Pavlov/unsplash)

The victim of an email-based cyberattack, cross-chain protocol deBridge Finance says its investigation shows the action likely came from the North Korea-associated Lazarus Group.

The attack took the form of an email address spoofing that of deBridge co-founder Alex Smirnov. Though most employees reported the suspicious email, one downloaded and opened the associated file.

jwp-player-placeholder
STORY CONTINUES BELOW
Verpassen Sie keine weitere Geschichte.Abonnieren Sie noch heute den Crypto Daybook Americas Newsletter. Alle Newsletter ansehen

The company's probe of the hack shows a similar attack vector to those noticed in other cyberattacks by North Korea's Lazarus Group, said Smirnov in a lengthy Twitter thread.

"PSA for all teams in Web3," wrote Smirnov, "this campaign is likely widespread."

Read more: US Officials Tie North Korea’s ‘Lazarus’ Hackers to $625M Crypto Theft


Stephen Alpher

Stephen is CoinDesk's managing editor for Markets. He previously served as managing editor at Seeking Alpha. A native of suburban Washington, D.C., Stephen went to the University of Pennsylvania's Wharton School, majoring in finance. He holds BTC above CoinDesk’s disclosure threshold of $1,000.

CoinDesk News Image

Mehr für Sie

Multisig Failures Dominate as $2B Is Lost in Web3 Hacks in the First Half

Alt

A wave of multisig-related hacks and operational misconfiguration led to catastrophic losses in the first half of 2025.

Was Sie wissen sollten:

  • Over $2 billion was lost to Web3 hacks in the first half of the year, with the first quarter alone surpassing 2024’s total.
  • Multisig wallet mismanagement and UI tampering caused the majority of major exploits.
  • Hacken urges real-time monitoring and automated controls to prevent operational failures.