Ripple Shares North Korea Hacking Intelligence as Crypto Attacks Shift to Social Engineering

According to Crypto ISAC announcement on Tuesday, Ripple is sharing internal intelligence on North Korea-linked threat actors with the crypto sector, including fraud-associated domains, wallet addresses, and indicators of compromise from recent hacking campaigns.

The move follows the $280 million Drift incident, which highlighted a shift toward sophisticated social engineering tactics rather than smart contract exploits. Ripple and Crypto ISAC have launched a new API to enable fast, actionable threat data sharing across the industry. According to TRM Labs, North Korea accounted for 64% of global crypto hack losses in 2025, up from below 10% in 2020-2021.