The Ethereum Foundation-funded Ketman Project has identified approximately 100 suspected North Korean IT workers operating across 53 crypto projects, according to an ETH Rangers Program recap published on April 16.
The six-month initiative, backed through stipends from the Ethereum Foundation’s ETH Rangers Program, focused specifically on detecting and expelling DPRK operatives who had infiltrated Web3 organizations under fabricated identities.
How North Koreans Use Forged Identities and Fake KYC Documents
A recent Ketman investigation detailed how DPRK-linked actors posed as Japanese developers on the Web3 freelance platform OnlyDust.
The operatives used AI-generated profile photos, fabricated names such as “Hiroto Iwaki” and “Motoki Masuo,” and submitted forged Japanese identity documents during verification.
Investigators confirmed the deception during a video call when one suspect, asked to introduce himself in Japanese, removed his headset and left the call.
The team traced at least three actor clusters

The Ethereum Foundation-funded Ketman Project has identified approximately 100 suspected North Korean IT workers operating across 53 crypto projects, according to an ETH Rangers Program recap published on April 16.The six-month initiative, backed through stipends from the Ethereum Foundation’s ETH Rangers Program, focused specifically on detecting and expelling DPRK operatives who had infiltrated Web3 organizations under fabricated identities.<h2>How North Koreans Use Forged Identities and Fake KYC Documents</h2>A recent Ketman <a href="https://www.ketman.org/dprk-it-workers-in-freelance-platform-onlyDust.html" rel="nofollow">investigation</a> detailed how DPRK-linked actors posed as Japanese developers on the Web3 freelance platform OnlyDust.The operatives used AI-generated profile photos, fabricated names such as “Hiroto Iwaki” and “Motoki Masuo,” and submitted forged Japanese identity documents during verification.Investigators <a href="https://blog.ethereum.org/en/2026/04/16/eth-rangers-recap" rel="nofollow">confirmed</a> the deception during a video call when one suspect, asked to introduce himself in Japanese, removed his headset and <a href="https://beincrypto.com/north-korean-crypto-hacker-techniques/" rel="nofollow">left the call</a>.The team traced at least three actor clusters across 11 repositories, where 62 pull requests were merged before detection.<h2>Open-Source Tools and Industry Framework</h2>Beyond individual investigations, Ketman developed gh-fake-analyzer, an open-source GitHub profile analysis tool now available on PyPI.The project also co-authored the <a href="https://beincrypto.com/north-korean-hackers-infiltrate-crypto-startups/" rel="nofollow">DPRK IT Workers Framework</a> with the Security Alliance (SEAL), which has become a standard industry reference.The ETH Rangers Program, launched in late 2024 alongside Secureum, The Red Guild, and SEAL, funded 17 stipend recipients in total.Consolidated outcomes included over $5.8 million in recovered funds, <a href="https://beincrypto.com/north-korea-crypto-theft-2025/" rel="nofollow">785 reported vulnerabilities</a>, and 36 incident responses handled.North Korean operatives have <a href="https://beincrypto.com/north-korea-cashes-out-billions-in-stolen-crypto/" rel="nofollow">stolen billions in crypto assets in recent years</a>. Security researchers warn that IT worker infiltration often serves as a stepping stone for larger supply chain attacks coordinated by DPRK hacking teams.

Ethereum-Funded Project Exposes 100 North Korean IT Workers in Crypto

根据ETH Rangers Program 于 4 月 16 日发布的总结报告显示，由以太坊基金会资助的 Ketman 计划已确认约有 100 名涉嫌在 53 个加密计划中活动的北韩 IT 工作人员。
这项为期六个月的计划由以太坊基金会的ETH Rangers 计划提供津贴支持，专门针对以虚假身分渗透到 Web3 组织中的北韩特工进行侦查和驱逐。
北韩人如何使用伪造身分和虚假KYC文件
Ketman 最近的一项调查详细描述了与北韩有关的人员如何在 Web3 自由职业平台 OnlyDust 上冒充日本开发者。
犯罪者使用人工智慧产生的个人资料照片，捏造了「岩城博人」、「增尾元树」等姓名，并在验证过程中提交了伪造的日本身分证件。
调查人员在视讯通话中证实了这起欺骗事件，当时一名嫌疑人被要求用日语自我介绍，但他却摘下耳机退出了通话。
该团队追踪到了至少三个演员聚集区。

根据ETH Rangers Program 于 4 月 16 日发布的总结报告显示，由以太坊基金会资助的 Ketman 计划已确认约有 100 名涉嫌在 53 个加密计划中活动的北韩 IT 工作人员。这项为期六个月的计划由以太坊基金会的ETH Rangers 计划提供津贴支持，专门针对以虚假身分渗透到 Web3 组织中的北韩特工进行侦查和驱逐。<h2>北韩人如何使用伪造身分和虚假KYC文件</h2>Ketman 最近的一项<a href="https://www.ketman.org/dprk-it-workers-in-freelance-platform-onlyDust.html" rel="nofollow">调查</a>详细描述了与北韩有关的人员如何在 Web3 自由职业平台 OnlyDust 上冒充日本开发者。犯罪者使用人工智慧产生的个人资料照片，捏造了「岩城博人」、「增尾元树」等姓名，并在验证过程中提交了伪造的日本身分证件。调查人员在视讯通话中<a href="https://blog.ethereum.org/en/2026/04/16/eth-rangers-recap" rel="nofollow">证实了</a>这一欺骗行为，当时一名嫌疑人被要求用日语进行自我介绍，但他却摘下耳机<a href="https://beincrypto.com/north-korean-crypto-hacker-techniques/" rel="nofollow">退出了通话</a>。该团队追踪到 11 个程式码库中至少有 3 个攻击者集群，在发现这些集群之前，这些集群合并了 62 个拉取请求。<h2>开源工具与产业框架</h2>除了个别调查之外，Ketman 还开发了 gh-fake-analyzer，这是一个开源的 GitHub 个人资料分析工具，现在可以在 PyPI 上找到。该计划还与安全联盟（SEAL）共同编写了《<a href="https://beincrypto.com/north-korean-hackers-infiltrate-crypto-startups/" rel="nofollow">朝鲜民主主义人民共和国资讯技术工作者框架》</a> ，该框架已成为行业标准参考。 ETH Rangers 计划于 2024 年底与 Secureum、The Red Guild 和 SEAL 一起启动，总共资助了 17 名津贴获得者。综合结果包括追回超过 580 万美元的资金，<a href="https://beincrypto.com/north-korea-crypto-theft-2025/" rel="nofollow">报告了 785 个漏洞</a>，并处理了 36 起事件回应。 <a href="https://beincrypto.com/north-korea-cashes-out-billions-in-stolen-crypto/" rel="nofollow">近年来，北韩特工窃取了数十亿美元的加密资产</a>。安全研究人员警告称，IT从业人员的渗透往往只是北韩骇客团队策划更大规模供应链攻击的跳板。

以太坊资助项目曝光100名朝鲜加密货币从业人员

纳瓦尔·拉维坎特（Naval Ravikant）在 Podcast 中谈到「现在纯软体不值得投」的判断，讨论 […]
〈纳瓦尔赐死预言：苹果已死，SaaS是下一个〉这篇文章最早发布于动区BlockTempo《动区动趋-最具影响力的区块链新闻媒体》。

纳瓦尔赐死预言：苹果已死，SaaS是下一个

[HBM]
过去半年，最赚钱的「资产」不是黄金、不是白银、不是比特币——是你电脑里那条不起眼的内存条。
DDR4 16GB现货价较年初暴涨200%-340%，三星、美光等巨头一度集体暂停报价。一根256GB的DDR5服务器内存价格突破4万元人民币——单条售价相当于一台旗舰手机。
更糟的消息是：账单还没传到你手里。但4月30日凌晨，库克在苹果财报电话会上已经预告——6月之后，开始传导。
01 半年3...

AI抢走了你的内存条

据 Punchbowl News 独家披露，美国参议院跨党派议员已针对《CLARITY Act》中的「稳定币收 […]
〈CLARITY Act 重大突破！美参议院达成「稳定币收益」妥协，Coinbase 赞：守住核心利益〉这篇文章最早发布于动区BlockTempo《动区动趋-最具影响力的区块链新闻媒体》。