The Ethereum Foundation has revealed a major security threat inside the crypto industry. A six-month program backed by the group has identified around 100 North Korean operatives working inside Web3 companies.
This effort was part of the ETH Rangers Program. The goal was simple. It aimed to improve security across the Ethereum ecosystem. But the findings show a deeper problem. Fake developers linked to North Korean groups had quietly entered real teams.
The Ethereum Foundation supported independent researchers to study risks in the ecosystem. One key effort, called the Ketman Project, focused on tracking suspicious developer activity. Over time, the project uncovered about 100 individuals linked to North Korean operations. These operatives used fake identities to join crypto teams.
In many cases, companies did not know who they were hiring. The investigation also flagged 53 projects. These teams may have unknowingly worked with these individuals. As a result, the Ethereum Foundation called this one of the most serious security risks today.
The program did more than just identify threats. It also helped protect funds and improve systems. Across all efforts, over $5.8 million in assets were recovered or frozen. In addition, researchers reported more than 785 vulnerabilities. These included bugs, weak points and attack risks across different platforms.
This shows how wide the security challenge has become. The Ethereum Foundation also supported tools and training. Teams created new systems to detect fake profiles. They also shared knowledge to help others stay safe from North Korean infiltration tactics.
The North Korean operatives used smart tactics. They applied for jobs as remote developers. They built strong profiles and passed interviews. Once inside, they gained access to systems and sensitive data. Because Web3 teams often hire globally, this risk increases.
Many companies rely on online profiles and freelance platforms. This makes it easier for fake identities to slip through. To fight this, the Ketman Project worked with security groups to build a detection framework. This tool helps teams spot unusual behavior and patterns. It is now becoming a key resource for the industry.
The Ethereum Foundation has made its position clear. Security must improve as the ecosystem grows. The group believes that decentralized systems need decentralized defense. This means more awareness, better tools and stronger hiring checks. It also means teams must stay alert to evolving threats, especially those linked to North Korean actors.
For now, the findings serve as a warning. The threat is real and it is already inside the system. However, with better coordination and tools, the industry can respond. As Web3 expands, security will remain a top priority. The Ethereum Foundation’s latest report shows that protecting the ecosystem requires constant effort and global cooperation.
The post Ethereum Foundation Exposes 100 North Korean Crypto Spies appeared first on Coinfomania.


