Meet the Top 101 in Crypto
News
2 min read

Binance’s CZ Issues Security Alert: North Korean Hackers Exploiting Hiring, Vendors, and Support Tickets

Published 18 September 2025
Prashant Jha
Authors
Edited by Insha Zia

Key Takeaways

  • Binance co-founder CZ has warned crypto firms about North Korean hackers infiltrating through fake job applications.
  • Hackers are posing as developers, security experts, and finance workers with stolen IDs and polished resumes.
  • A security firm has profiled more than 60 impostors tied to North Korean operations.

Binance co-founder Changpeng Zhao (CZ) has issued a stark warning to the crypto industry: North Korean hackers, especially Lazarus, are increasingly using fake resumes and job applications to infiltrate digital asset firms.

The alert comes after cybersecurity group Security Alliance released a dossier profiling 60 impostors tied to North Korean operations.

Many were found submitting polished resumes and fabricated work histories to land roles as developers, IT staff, and finance professionals inside crypto companies.

Try Our Recommended Crypto Exchanges
Sponsored
Disclosure
Opened in 2018
Promotions
Deposit $100, Get an Extra $300 in GOLD!
Coins
Shiba Inu Bitcoin PAX Gold Ampleforth Ethereum +70
Promotions
Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.
Coins
Bitcoin Ethereum Tether USD Coin Solana +76
Opened in 2017
Promotions
Experience a 1-minute swap on a non-custodial platform.
Coins
Bitcoin Ethereum Tether Build'N'Build USD Coin +217
Show More

The Lazarus Effect

For years, North Korea’s Lazarus Group and affiliated outfits have relied on phishing and malware attacks to steal billions from exchanges.

Now, their tactics extend into human resources. By embedding operatives inside firms, hackers can bypass external defenses altogether.

The Security Alliance highlighted examples of impostors applying with government-issued IDs, LinkedIn pages, and elaborate portfolios.

In one case, applicants submitted malware disguised as code updates during technical interviews. Others laced support tickets with malicious links or attempted to bribe employees for system access.

Billions Lost to North Korean Hackers Sophisticated Operations

North Korean hackers remain among the most prolific financial cybercriminals.

According to industry trackers, they looted over $1.3 billion in crypto in 2024 alone, targeting everything from exchanges to cross-chain bridges.

Binance itself reportedly rejects fraudulent resumes on a daily basis.

A separate August investigation by on-chain analyst ZachXBT uncovered at least five North Korean operatives cycling through 30 different identities in an attempt to secure employment at crypto startups.

CZ urged platforms to tighten recruitment procedures, improve staff training, and share intelligence across the industry.

Prashant Jha

Prashant Jha is a seasoned crypto journalist based in Delhi, India, with a Bachelor’s Degree in Computer Science Engineering. Passionate about the evolving world of blockchain and cryptocurrencies, he has been a dedicated voice in the industry since 2018. Prashant’s expertise lies in regulatory reporting, where he unravels complex legal and financial developments with clarity and precision. Before joining CCN in 2024, he honed his craft at Cointelegraph, establishing himself as a trusted name in crypto journalism.

His coverage spans major industry events, including the high-profile collapses of FTX, Three Arrows Capital (3AC), and LUNA, offering readers insightful analyses of their regulatory and market implications. Prashant’s technical background enables him to bridge the gap between intricate blockchain technology and its real-world applications, making his work accessible to novices and experts.

Beyond his professional pursuits, Prashant is an avid music enthusiast, often exploring diverse genres to unwind. A sports lover, he has a particular passion for cricket and frequently engages in discussions about the game. His multifaceted interests and sharp journalistic instincts make him a valuable contributor to CCN, where he continues shaping the crypto landscape's narrative.

Related

Survey Icon
Help us improve
1 of 4
Is this your first time here?
What brought you here today?
What are you most interested in?
Would you be interested in:
Thank you icon
Thank you for your feedback!
DMCA.com Protection Status