The Ethereum Foundation identifies approximately 100 "state-level hackers" infiltrators with suspected North Korean ties.

Mars Finance News. On April 17, the Ethereum Foundation recently released the ETH Rangers security project summary report. It disclosed that, within a 6-month security grants program, researchers collectively identified about 100 suspected state-sponsored cyber operatives, including infiltrators from North Korea (DPRK) who have been active across multiple Web3 projects.

The report shows that the relevant investigations were carried forward through initiatives such as the “Ketman Project.” Researchers issued alerts to about 53 blockchain projects, revealing how these individuals infiltrated development teams using false identities and participated in fund transfers and technical-role work. Meanwhile, some related funds have been frozen, totaling on the order of several hundred thousand dollars.

The security team will also incorporate the relevant intelligence into the threat analysis system for the Lazarus Group, and disclose it at security conferences such as DEF CON, showing that nation-state cyberattacks are continuing to penetrate critical infrastructure in the crypto industry.

In terms of overall outcomes, the program has cumulatively frozen or recovered more than $5.8 million, with the report or records covering over 785 security weaknesses, and it handled 36 security incidents. This indicates that the security threats currently facing the Ethereum ecosystem have evolved from purely vulnerability attacks into systemic risks involving nation-state actors.

In addition, the report points out that North Korea-related hackers are also infiltrating projects through methods such as “remote IT workers,” involving multiple attack paths including account takeovers, infiltration of freelancing platforms, and fund transfers—making them a key prevention target for the industry.

The Ethereum Foundation emphasizes that securing a decentralized network requires “decentralized defense.” In the future, it will continue to support security research, threat intelligence, and talent development to respond to ever-escalating nation-state cyber threats.