North Korean hackers are suspected of orchestrating a $285 million cryptocurrency theft from Drift Protocol, marking the largest crypto heist of 2025. The attack began last fall when operatives posing as employees of a quantitative trading firm approached Drift Protocol representatives at a major cryptocurrency conference. Over several months, the hackers cultivated a relationship through in-person meetings and Telegram communications, building trust before executing their scheme.

This sophisticated social engineering attack highlights the growing threat from North Korea's cyber army, which has plundered billions from the crypto industry in recent years. Kim Jong Un's hackers have become increasingly adept at targeting decentralized finance platforms, using elaborate deception tactics to bypass security measures. The theft comes amid heightened concerns about North Korea's ability to fund its weapons programs through cybercrime.

The breach underscores the vulnerability of even established crypto platforms to human-targeted attacks. Drift Protocol, with roughly half a billion dollars in assets, fell victim to what investigators believe was a carefully orchestrated North Korean operation. As the crypto industry grapples with this latest heist, questions persist about how to better protect against increasingly sophisticated state-sponsored cyber threats targeting digital assets.