{"id":257617,"date":"2026-04-18T00:08:10","date_gmt":"2026-04-17T15:08:10","guid":{"rendered":"https:\/\/tenbizt.com\/en\/news\/uncategorized\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/"},"modified":"2026-04-18T00:08:11","modified_gmt":"2026-04-17T15:08:11","slug":"100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry","status":"publish","type":"post","link":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/","title":{"rendered":"100 North Korean Fake Developers Exposed: How Ethereum Foundation’s Project is Securing the Crypto Industry"},"content":{"rendered":"

Translation result.<\/p>\n

The Ethereum Foundation disclosed it funded a project that identified 100 DPRK-linked operatives who had infiltrated Web3 companies by posing as employees. The finding highlights how DPRK IT operatives using fabricated identities are emerging as a broad security threat across the crypto sector.<\/p>\n

On the 13th, the Ethereum Foundation said it awarded grants for public-good security work through the ETH Rangers program, launched at the end of 2024. One grantee used that support to build the Ketman Project, a six-month effort focused on tracking fraudulent developers in the crypto industry that identified 100 DPRK-linked IT personnel.<\/p>\n

Warned 53 projects \u2014 zeroed in on an operational security threat<\/h3>\n

The Ketman Project corroborated indicators and contacted about 53 projects to warn they may have hired DPRK-linked personnel. The Ethereum Foundation said the effort tackles one of the most urgent operational security threats facing the Ethereum ecosystem today.<\/p>\n

The threat from DPRK-affiliated hacking groups has long been a major industry concern. Notably, the Lazarus Group and other DPRK-linked actors have been tied to crypto heists worth tens of billions of dollars over recent years.<\/p>\n

GitHub footprints and language settings gave investigators clues<\/h3>\n

The Ethereum Foundation did not disclose all identification methods, but the Ketman Project cataloged signs such as repeated avatars and profile details on GitHub accounts, unlinked email addresses exposed during screen sharing, and default Russian-language settings inconsistent with claimed nationalities. The work underscores that even developers who appear legitimate leave digital traces.<\/p>\n

The project went beyond identification: it produced an open-source tool to detect suspicious GitHub activity and co-developed an industry-grade identification framework with Security Alliance, a blockchain-focused nonprofit.<\/p>\n

This case demonstrates that security in the crypto industry extends beyond technical hardening to include personnel vetting and identity verification. As DPRK-linked intrusion attempts persist, the Ethereum ecosystem and other Web3 firms will need to sharpen and sophisticate their security posture.<\/p>\n

Article summary by TokenPost.ai<\/b> \ud83d\udd0e Market analysis<\/b> The Ethereum Foundation\u2019s grant support for a security initiative that uncovered 100 disguised DPRK-linked developers has pushed personnel-based security risk to the forefront across Web3. Insider-style infiltration is rising beyond conventional hacks, creating wider trust and operational risks for the ecosystem. \ud83d\udca1 Strategic points<\/b> Organizations must strengthen identity controls in hiring and collaboration processes, not just code security. Metadata-driven screening \u2014 including GitHub activity patterns, language settings, and collaboration records \u2014 is increasingly vital. Open-source detection tools and partnerships with external security communities are emerging as key elements of risk management. \ud83d\udcd8 Glossary<\/b> ETH Rangers: The Ethereum Foundation program funding security researchers Ketman Project: A security effort to track and identify DPRK-linked IT personnel posing as developers Lazarus Group: A cyber-hacking group widely linked to DPRK On-chain\/off-chain security: A broader security model covering blockchain data and external personnel and systems\n<\/div>\n
\n

\ud83d\udca1 Frequently Asked Questions (FAQ)<\/h3>\n
\n Q.<\/span> How do DPRK developers infiltrate companies? <\/summary>\n
\n DPRK IT personnel frequently use fabricated identities and r\u00e9sum\u00e9s to secure jobs or freelance roles, posing as legitimate developers. Once inside, they can seek access to internal systems to exfiltrate data or exploit vulnerabilities.\n <\/div>\n<\/details>\n
\n Q.<\/span> How can companies identify these disguised personnel? <\/summary>\n
\n Companies can detect red flags by analyzing digital behavioral signals: GitHub activity patterns, repeated or inconsistent profile details, mismatched language settings, and email traces revealed during collaboration. Correlating multiple indicators improves detection.\n <\/div>\n<\/details>\n
\n Q.<\/span> Why is this especially significant for the crypto industry? <\/summary>\n
\n Crypto firms custody and control assets that exist solely in digital form, so insider access can enable outsized theft or disruption. DPRK-linked groups have been associated with heists worth tens of billions of dollars, making proactive personnel screening and operational security essential.\n <\/div>\n<\/details>\n<\/section>\n

TP AI Notice<\/b> This article summary was produced using a TokenPost.ai language model. Key details may be omitted or inaccurate; consult original sources for verification.<\/i><\/p>\n","protected":false},"excerpt":{"rendered":"

The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_thumbnail_url":"https:\/\/cdn-union.tenbizt.com\/contents\/crawler-dev\/thumbnail\/2026\/04\/CP-2025-0041\/thumb-c43697a1-b11e-4399-b409-39a55950f38c.jpg","footnotes":""},"categories":[278104],"tags":[],"class_list":["post-257617","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-military"],"yoast_head":"\n100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry<\/title>\n<meta name=\"description\" content=\"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry\" \/>\n<meta property=\"og:description\" content=\"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\" \/>\n<meta property=\"og:site_name\" content=\"nonhyeon-ilbo\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-17T15:08:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T15:08:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/tenbizt.com\/en\/wp-content\/uploads\/2026\/02\/mvp-home-featured-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\uac1c\ubc1c\uae30\ud68d\ud300\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\"},\"author\":{\"name\":\"\uac1c\ubc1c\uae30\ud68d\ud300\",\"@id\":\"https:\/\/tenbizt.com\/en\/#\/schema\/person\/b2265094fd34d8bb5cfbaf6040fa17d3\"},\"headline\":\"100 North Korean Fake Developers Exposed: How Ethereum Foundation’s Project is Securing the Crypto Industry\",\"datePublished\":\"2026-04-17T15:08:10+00:00\",\"dateModified\":\"2026-04-17T15:08:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\"},\"wordCount\":629,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/tenbizt.com\/en\/#organization\"},\"articleSection\":[\"Military\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\",\"url\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\",\"name\":\"100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry\",\"isPartOf\":{\"@id\":\"https:\/\/tenbizt.com\/en\/#website\"},\"datePublished\":\"2026-04-17T15:08:10+00:00\",\"dateModified\":\"2026-04-17T15:08:11+00:00\",\"description\":\"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.\",\"breadcrumb\":{\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\/\/tenbizt.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Military\",\"item\":\"https:\/\/tenbizt.com\/en\/news\/category\/military\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"100 North Korean Fake Developers Exposed: How Ethereum Foundation’s Project is Securing the Crypto Industry\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/tenbizt.com\/en\/#website\",\"url\":\"https:\/\/tenbizt.com\/en\/\",\"name\":\"nonhyeon-ilbo\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/tenbizt.com\/en\/#organization\"},\"alternateName\":\"nonhyeon-ilbo\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/tenbizt.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/tenbizt.com\/en\/#organization\",\"name\":\"nonhyeon-ilbo\",\"alternateName\":\"nonhyeon-ilbo\",\"url\":\"https:\/\/tenbizt.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/tenbizt.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cdn.tenbizt.com\/tenbizt\/2026\/02\/05114330\/mvp-org-logo-696x696-1.jpg\",\"contentUrl\":\"https:\/\/cdn.tenbizt.com\/tenbizt\/2026\/02\/05114330\/mvp-org-logo-696x696-1.jpg\",\"width\":696,\"height\":696,\"caption\":\"nonhyeon-ilbo\"},\"image\":{\"@id\":\"https:\/\/tenbizt.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/tenbizt.com\/en\/#\/schema\/person\/b2265094fd34d8bb5cfbaf6040fa17d3\",\"name\":\"\uac1c\ubc1c\uae30\ud68d\ud300\",\"url\":\"https:\/\/tenbizt.com\/en\/news\/author\/fastmaster\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry","description":"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/","og_locale":"ko_KR","og_type":"article","og_title":"100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry","og_description":"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.","og_url":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/","og_site_name":"nonhyeon-ilbo","article_published_time":"2026-04-17T15:08:10+00:00","article_modified_time":"2026-04-17T15:08:11+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/tenbizt.com\/en\/wp-content\/uploads\/2026\/02\/mvp-home-featured-image.jpg","type":"image\/jpeg"}],"author":"\uac1c\ubc1c\uae30\ud68d\ud300","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#article","isPartOf":{"@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/"},"author":{"name":"\uac1c\ubc1c\uae30\ud68d\ud300","@id":"https:\/\/tenbizt.com\/en\/#\/schema\/person\/b2265094fd34d8bb5cfbaf6040fa17d3"},"headline":"100 North Korean Fake Developers Exposed: How Ethereum Foundation’s Project is Securing the Crypto Industry","datePublished":"2026-04-17T15:08:10+00:00","dateModified":"2026-04-17T15:08:11+00:00","mainEntityOfPage":{"@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/"},"wordCount":629,"commentCount":0,"publisher":{"@id":"https:\/\/tenbizt.com\/en\/#organization"},"articleSection":["Military"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/","url":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/","name":"100 North Korean Fake Developers Exposed: How Ethereum Foundation's Project is Securing the Crypto Industry","isPartOf":{"@id":"https:\/\/tenbizt.com\/en\/#website"},"datePublished":"2026-04-17T15:08:10+00:00","dateModified":"2026-04-17T15:08:11+00:00","description":"The Ethereum Foundation revealed it supported a project identifying 100 North Korean-linked fake IT workers posing security threats in crypto.","breadcrumb":{"@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/tenbizt.com\/en\/news\/military\/2026\/04\/18\/100-north-korean-fake-developers-exposed-how-ethereum-foundations-project-is-securing-the-crypto-industry\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/tenbizt.com\/en\/"},{"@type":"ListItem","position":2,"name":"Military","item":"https:\/\/tenbizt.com\/en\/news\/category\/military\/"},{"@type":"ListItem","position":3,"name":"100 North Korean Fake Developers Exposed: How Ethereum Foundation’s Project is Securing the Crypto Industry"}]},{"@type":"WebSite","@id":"https:\/\/tenbizt.com\/en\/#website","url":"https:\/\/tenbizt.com\/en\/","name":"nonhyeon-ilbo","description":"","publisher":{"@id":"https:\/\/tenbizt.com\/en\/#organization"},"alternateName":"nonhyeon-ilbo","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tenbizt.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/tenbizt.com\/en\/#organization","name":"nonhyeon-ilbo","alternateName":"nonhyeon-ilbo","url":"https:\/\/tenbizt.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/tenbizt.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/cdn.tenbizt.com\/tenbizt\/2026\/02\/05114330\/mvp-org-logo-696x696-1.jpg","contentUrl":"https:\/\/cdn.tenbizt.com\/tenbizt\/2026\/02\/05114330\/mvp-org-logo-696x696-1.jpg","width":696,"height":696,"caption":"nonhyeon-ilbo"},"image":{"@id":"https:\/\/tenbizt.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/tenbizt.com\/en\/#\/schema\/person\/b2265094fd34d8bb5cfbaf6040fa17d3","name":"\uac1c\ubc1c\uae30\ud68d\ud300","url":"https:\/\/tenbizt.com\/en\/news\/author\/fastmaster\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/posts\/257617"}],"collection":[{"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/comments?post=257617"}],"version-history":[{"count":0,"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/posts\/257617\/revisions"}],"wp:attachment":[{"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/media?parent=257617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/categories?post=257617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenbizt.com\/en\/wp-json\/wp\/v2\/tags?post=257617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}