FBI links North Korean hackers to $308 million crypto heist

The FBI attributes a May 2024 theft of 4,502.9 BTC (about $308M) from Japanese exchange DMM Bitcoin to North Korean-linked TraderTraitor (Jade Sleet / UNC4899). The actors used LinkedIn social engineering to deliver malicious Python code via a fake GitHub pre-employment test, compromised a Ginco employee with access to wallet management, exploited session cookies to impersonate that employee, and manipulated a legitimate transaction to exfiltrate funds—part of a broader pattern of North Korean targeting of the blockchain ecosystem.