North Korea-linked groups, including Lazarus, stole approximately $643 million in cryptocurrency in the first half of 2026, primarily through attacks on Drift and KelpDAO. This highlights how Web3 infrastructure is exploited for state-backed cybercrime funding.
These groups are highly organized, patient, and technically sophisticated, exploiting weak security practices in DeFi projects such as rushed integrations and poor infrastructure hardening.
Stolen funds neither recovered nor frozen; security awareness and industry scrutiny are expected to rise.
DriftTrade perps, predict markets, stake SOL.Drift Protocol is a Solana on-chain asset trading center, offer Perps, Prediction Market and so on services.
KelpDAO is a decentralized liquid restaking platform that enables users to deposit ETH and receive liquid restaked tokens, enhancing capital efficiency in the EigenLayer ecosystem.
Hinkal ProtocolSafe Privacy Protocol for good intentionsHinkal is a ZK-based solution that provides a private smart contract wallet experience, allowing users to participate in their favorite dApps directly from their private addresses without the need to withdraw assets for obfuscation. Hinkal enables privacy of transactions and assets across core DeFi apps and functions, including trading, farming, staking, and lending through the use of stealth addresses and with high degree of compliance.
RT @Phalcon_xyz: 🗓️ Weekly Web3 Security Roundup | Jun 29 - Jul 5 🚨 This week's focus: @hinkal_protocol Double-Spend Attack ~$800K drained…