Amidst one more massive hack attributed to North Korea-linked operatives, some crypto builders have confessed they’re passing assessments throughout interviews to builders to ensure they aren’t North Korean brokers.
The Idiot-Proof “Kim Jong‑Un Check” For Crypto Builders
As soon as once more, the Democratic Individuals’s Republic of Korea (DPRK) is liable for some motion movie-sounding strikes.
Following the attribution of the April 1st $285 million attack on Drift Protocol to UNC4736, a North Korea–aligned, state‑sponsored hacking group, a number of crypto trade actors have taken to the social community X to share their fears and strategies to fight what basically are DPRK secret brokers.
All particulars on the lengthy‑time period social engineering, faux skilled personas, in‑individual convention conferences and compromised tooling employed within the assault might be consulted on a yesterday’s article in our sister’s website Bitcoinist.
Unbelievable and hilarious as it could sound, probably the most simple technique a few of these builders have discovered is asking candidates to explicitly insult Kim Jong-Un, North Korea’s regime head, throughout interviews.
Associated Studying
Crypto Builders Share Proof
Yesterday, Tanuki42, an unbiased blockchain safety investigator, shared an precise video of a “North Korean IT employee being stopped lifeless of their tracks upon being required to insult Kim Jong Un”.
Within the video, “Taro Aikuchi” wasn’t simply unable to repeat after the interviewer that “Kim Jong-Un is a fats, ugly pig”: he was greatly surprised and visibly nervous.
Here’s a video of a North Korean IT employee being stopped lifeless of their tracks upon being required to insult Kim Jong Un.
It gained’t work without end, however proper now it’s genuinely an efficient filter. I’m but to return throughout one who can say it. https://t.co/8FFVPxNm8X pic.twitter.com/KXI5efMo5L
— tanuki42 (@tanuki42_) April 6, 2026
In a unique video shared by the safety investigator, “Taro” tells him amusingly that he “is aware of North Korea properly”, however then experiences very handy connection points when is requested to say “Fuck Kim Jong-Un”.
The clip I posted was really spherical 2. Right here’s spherical 1 – I inform Taro I’m a North Korea safety researcher, he tells me he “is aware of North Korea properly”. Mysterious connection points once I say “Fuck Kim Jong Un”, which he apologises for on reconnecting.😅 pic.twitter.com/M89KDDmASW
— tanuki42 (@tanuki42_) April 6, 2026
In a while the thread, Tanuki42 confirmed the candidate modified his Telegram deal with, wiped their chat and blocked him after the interview.
🚨@taroaikuchi simply modified his Telegram deal with @cryptotrading2150->@cryptodegen202 – he’d already wiped our chat and blocked me 😭 pic.twitter.com/EcQedYyGG7
— tanuki42 (@tanuki42_) April 6, 2026
His X account and LinkedIn web page additionally disappeared.
Crypto investor and fund supervisor Jason Choi quoted Tanuki42’s thread to echo the message, claiming that lots of crypto founders have shared with him that this check works.
A number of founders in crypto have instructed me they ran this check and it genuinely labored https://t.co/DIZHoZDZ0l
— Jason Choi (@mrjasonchoi) April 6, 2026
Crypto founder and RWA‑targeted builder Pav replied to Choi saying that he has been utilizing the tactic 2024, after he found out he was interviewing a DPRK agent for an engineering position in 2022.
have been utilizing this since 2024 and works like a allure https://t.co/nYWYIGxrAA
— Parv (@Parv_EP) April 6, 2026
Simon Wijckmans, one other cybersecurity founder and product chief, additionally replied to Choi sharing a clip from one in every of his personal interviews with a candidate, “William Nation”, who didn’t say that Kim Jong-Un is a dictator after Wijckmans requested him to do it
Yep pic.twitter.com/Aht731yvRc
— Simon (@SimonWijckmans) April 6, 2026
Some Crypto Builders Stay Sceptic
Regardless of the overwhelming proof, the wackiness of the story nonetheless finds flabbergasted nonbelievers.
On a unique thread from a number of days in the past, Paolo Caversaccio, a Switzerland‑based mostly engineer and entrepreneur targeted on cryptography, privateness and safety, shared one in every of his makes an attempt to make use of the identical Kim Jong-Un insult tactic to ensure he’s not working with North Korean spies.
going ahead I’ll request from each exterior contributor to my repos a pleasant Kim Jong Un insult; it’s a straightforward however highly effective strategy to stop DPRK dev code (and a few of them are actually good) to be merged (they are going to by no means ever get the approval to do that). this man handed it… pic.twitter.com/Ms86or5GiP
— sudo rm -rf –no-preserve-root / (@pcaversaccio) April 4, 2026
He then entered an argument with lengthy‑time Ethereum ecosystem developer and founder Micah Zoltu relating to the precise effectiveness of the approach. However Caversaccio’s argument was compelling: he has been coping with DPRK IT staff for greater than three years.
After dealing for greater than 3 years with DPRK IT staff I can confidently declare this filter could be very robust. We are going to most likely launch some DPRK interviews publicly at some and can hyperlink it right here, they at all times fail with this query. You most likely assume my filter is a few random…
— sudo rm -rf –no-preserve-root / (@pcaversaccio) April 5, 2026
Market Implications
Associated Studying
The actual deal for merchants proper now isn’t guessing the subsequent meme, however figuring out which groups can defend towards nation‑state attackers.
For some time now, crypto has been coming into a part the place geopolitics, state‑sponsored cyber ops, and HR compliance are as essential as code audits. North Korean infiltration threat is now a structural issue for the trade.
Contemplating this, merchants ought to keep in mind that protocols with weak contributor vetting, opaque multisigs, or advert‑hoc governance current elevated tail‑threat that markets will more and more worth in.
It is usually advisable to search for initiatives that may show stronger operational safety, incident response and KYC for crucial roles could get pleasure from comparatively stronger valuations and extra sticky TVL.
For the time being of writing, BTC trades for round $68k on the day by day chart. Source: BTCUSDT on Tradingview.
Cowl picture from Perplexity. BTCUSDT chart from Tradingview.
