Did North Korean Hackers Sink DMM Exchange with a $308M Heist?
U.S. and Japanese authorities have identified North Korean hackers as the perpetrators behind the May 2024 breach of the DMM crypto exchange, resulting in a loss of $308 million.
On this page
U.S. and Japanese authorities have attributed the May 2024 hack of the DMM crypto exchange to North Korean cybercriminals, who allegedly siphoned $308 million in digital assets. The theft led to the exchange’s bankruptcy and liquidation of remaining assets.
The attack has been linked to the shadowy hacker collective known by aliases such as TraderTraitor, Jade Sleet, UNC4899, and Slow Pisces. Renowned for their sophisticated cyber operations, the group frequently employs targeted social engineering aimed at specific employees.
Investigators revealed that the hackers used LinkedIn to pose as recruiters. They approached an employee of Ginco, a DMM Japanese partner, and sent a “test assignment” embedded with a malicious Python script. Once executed, the script granted them access to session cookie information.
A month later, the hackers intercepted DMM’s transaction protocols to reroute the funds to their wallets, exploiting a critical vulnerability in the platform’s defenses. The breach underscores the persistent risks of social engineering and malware-based exploits faced by the crypto industry.
North Korea’s hacking operations remain a formidable threat to the sector. According to Chainalysis, the regime’s cyber groups were behind over $1 billion in crypto thefts last year, accounting for more than 50% of all stolen funds across fewer than 47 major incidents.
The content on The Coinomist is for informational purposes only and should not be interpreted as financial advice. While we strive to provide accurate and up-to-date information, we do not guarantee the accuracy, completeness, or reliability of any content. Neither we accept liability for any errors or omissions in the information provided or for any financial losses incurred as a result of relying on this information. Actions based on this content are at your own risk. Always do your own research and consult a professional. See our Terms, Privacy Policy, and Disclaimers for more details.