North Korea and Iran Dominate Onchain Malware, CoinEx Shuts Down

The attribution of most onchain malware to North Korea and Iran points to state-linked actors rather than opportunistic crime, which reframes onchain security as a geopolitical problem as much as a technical one. That shift matters for exchanges, custodians and compliance teams, whose threat models increasingly have to account for sanctioned-state activity. CoinEx's shutdown lands in the same news cycle, though the material offers no basis for linking the two. Whether the exchange's closure is connected to that threat landscape, or is simply coincidental timing, is the open question.