5 recorded changes
Want your article here?
Promote with Leviathan NewsIn September 2025, THORChain and Vultisig co‑founder JP suffered a significant personal security breach in which a private wallet holding about $1.35 million in crypto assets was drained following a sophisticated social‑engineering attack conducted over Telegram. According to on‑chain investigation accounts, the operation has been attributed to North Korean (DPRK) threat actors who used a fraudulent “meeting call” scenario, reportedly involving a deepfaked counterpart on Telegram, to compromise JP’s security. During the scam, the attackers were allegedly able to obtain access to his MetaMask keys via iCloud Keychain, enabling them to take full control of his wallet and move the funds out. The incident has been cited within the crypto security community as a notable example of how advanced social engineering and deepfake‑enabled impersonation are increasingly used to target high‑profile Web3 builders, rather than only protocol or contract‑level vulnerabilities. It underscores the systemic risk posed by storing wallet credentials or seed phrases in cloud‑synced environments and by trusting identity verification over consumer messaging apps, even for routine project or investor calls. For the broader ecosystem, the hack highlights both the continued activity of DPRK‑linked groups against crypto targets and the need for stronger operational security practices, including hardware‑based key storage, minimization of cloud backups, and robust out‑of‑band verification for any sensitive interactions conducted via Telegram or similar platforms.
AI-generated background, compiled from web sources — not editorial content.
Jumpsec ·
Chainalysis ·
𝕏 ·
𝕏/@KelpDAO ·
Coindesk ·
𝕏/@imperiumpaper ·
Jumpsec ·
Chainalysis ·
𝕏 ·
𝕏/@KelpDAO ·
Coindesk ·
𝕏/@imperiumpaper ·
🚀 Love DeFi? Ready to dive in and start earning $SQUID while making an impact?