North Korea’s Five Methods for Hacking Crypto Firms, Including Binance

The notable point is the diversification of attack surfaces rather than the attribution itself: AI deepfakes and poisoned code libraries target hiring pipelines and developer tooling, the soft spots at exchanges where security spend often lags trading infrastructure. The report's omission of dates and losses makes the scale hard to judge, which matters because a technique list without incident data reads as a warning catalogue rather than a trend. Whether exchanges treat supply-chain and identity verification as core risk, not compliance overhead, is the open question.