How North Korea's 6-month long secret espionage program has crypto community rethinking security
North Korea's six-month espionage campaign targeting DeFi highlights human vulnerabilities, shifting security focus from code to people.Summary
A six-month secret espionage program allegedly by North Korea, culminating in the $270 million Drift exploit, has prompted the crypto community to rethink security. Unlike traditional hacks, this operation involved fake identities, in-person meetings, and cultivated trust, demonstrating a shift from exploiting code vulnerabilities to targeting human elements. Security experts now advocate for viewing these incidents as intelligence operations rather than mere hacks, emphasizing that patient, socially embedded attackers pose a significant threat. This evolving threat model necessitates a broader approach to security, encompassing not just technical audits and code verification but also the protection of individuals, processes, and operational security. Protocols are beginning to adapt by enhancing training, monitoring key team members, and designing systems that assume compromise, acknowledging that human trust and vulnerability are the new Achilles' heel in decentralized finance.
(Source：CoinDesk)