The Ethereum Foundation’s ETH Rangers initiative has uncovered a major security threat in the Web3 industry, identifying roughly 100 individuals linked to North Korea who have infiltrated blockchain companies using false identities. The findings, reported by the Ketman Project—one of several efforts funded under the program—highlight the growing sophistication of North Korean cyber operations targeting the cryptocurrency sector.
The investigation underscores the need for blockchain companies to implement rigorous background checks to prevent malicious actors from gaining access to sensitive systems and data. Companies like Canaan Inc. (NASDAQ: CAN), a leading manufacturer of Bitcoin mining hardware, may need to reassess their hiring practices to ensure employee legitimacy.
North Korea has long been accused of using cyber attacks and infiltrations to generate revenue for its regime, bypassing international sanctions. The country’s operatives are known for assuming fake identities and using sophisticated social engineering tactics to secure positions in high-value targets. This latest discovery suggests that the blockchain industry remains vulnerable to such threats, given the pseudonymous nature of many crypto transactions and the global demand for talent in the sector.
The implications of this infiltration are significant. Operatives could potentially manipulate blockchain protocols, steal funds, or disrupt operations, undermining trust in the industry. For investors and users of crypto platforms, this highlights the importance of due diligence when choosing which projects or companies to support. The Ethereum Foundation’s exposure of these operatives serves as a warning to the entire Web3 community to enhance security measures and vetting processes.
The Ketman Project’s report did not disclose the names of the affected companies or the specific roles held by the operatives, but the scale of the infiltration suggests that many firms may be unaware of the threat within their ranks. The Ethereum Foundation is urging all blockchain companies to collaborate on security best practices and share intelligence to combat such threats.
This news comes amid broader concerns about North Korea’s involvement in cryptocurrency theft and hacking. The United Nations and various governments have repeatedly called for stronger cybersecurity protocols in the crypto space. The Ethereum Foundation’s investigation adds urgency to these calls, emphasizing that the threat is not just external but internal as well.


