Crypto e-commerce firm Bitrefill discloses cyberattack, names North Korea’s Lazarus Group as potential suspect

Market Impact

45/100

Potential exposure across 3 topics detected via keyword analysis.

Time Horizons:M=MinutesH=HoursD=DaysW=WeeksMo=Months

◆

BitcoinBTCvolatile

Topic "btc" detected in article text via keyword matching.

MHDWMo

30%

◆

Defense & Commoditiesvolatile

Topic "war" detected in article text via keyword matching.

MHDWMo

30%

◆

Digital Assetsvolatile

Topic "crypto" detected in article text via keyword matching.

MHDWMo

30%

btcwarcrypto

Original Source Text

Verbatim descriptions from source feeds — unedited, as received

The Block(center)

Bitrefill said attackers accessed 18,500 purchase records, potentially revealing “limited customer information."

Read full original ›

Decrypt(center)

Bitrefill, which lets users swap Bitcoin, Dogecoin and other crypto assets for gift cards, disclosed a breach that took place on March 1.

Read full original ›

r/CryptoCurrency(lean-left)

Uncovering a crazy story where a North Korean was hired to work at major crypto exchange gate(.)us and literally tapped into calls with identity verification firm, Sumsub, and blockchain Analytics firm, Elliptic, where they designed the KYC/AML procedures meant to stop North Korea from laundering fu

Read full original ›

r/CryptoCurrency(lean-left)

A North Korean threat actor, UNC4899, launched a sophisticated attack on a cryptocurrency firm in 2025, stealing millions in digital assets. The hackers tricked a developer into downloading a seemingly legitimate archive as part of an open-source collaboration. The developer transferred it to a co

Read full original ›

Reuters(center)

North Korea supports Iran's choice of new supreme leader, KCNA says Reuters

Read full original ›

The Guardian(left)

As speculation mounts that Kim Jong-un and Trump could meet this month, analysts say Pyongyang will continue to see nuclear weapons as a matter of survival Middle East crisis – live updates North Korea’s launch last week of a missile from a naval destroyer elicited an uncharacteristically prosaic

Read full original ›

Story Context

Decrypt

Bitrefill, which lets users swap Bitcoin, Dogecoin and other crypto assets for gift cards, disclosed a breach that took place on March 1.

r/CryptoCurrency

A North Korean threat actor, UNC4899, launched a sophisticated attack on a cryptocurrency firm in 2025, stealing millions in digital assets. The hackers tricked a developer into downloading a seemingly legitimate archive as part of an open-source collaboration.

Agent Research Pack

5 sources · 6 evidence links

Swarm Claim

Crypto e-commerce firm Bitrefill discloses cyberattack, names North Korea’s Lazarus Group as potential suspect.

The Block · link

Crypto e-commerce firm Bitrefill discloses cyberattack, names North Korea’s Lazarus Group as potential suspect

Bitrefill said attackers accessed 18,500 purchase records, potentially revealing “limited customer information."

Decrypt · link

Crypto Gift Card Platform Bitrefill Discloses Hack, Points Finger at North Korean Groups

Bitrefill, which lets users swap Bitcoin, Dogecoin and other crypto assets for gift cards, disclosed a breach that took place on March 1.

r/CryptoCurrency · link

Gate.us hired a North Korean remote worker who tapped into Sumsub and Elliptic KYC/AML procedures to launder funds for North Korea

Uncovering a crazy story where a North Korean was hired to work at major crypto exchange gate(.)us and literally tapped into calls with identity verification firm, Sumsub, and blockchain Analytics firm, Elliptic, where they designed the KYC/AML procedures meant to stop North Korea from laundering fu

r/CryptoCurrency · link

North Korean Hackers Exploit Dev Device, Steal Millions in Crypto

A North Korean threat actor, UNC4899, launched a sophisticated attack on a cryptocurrency firm in 2025, stealing millions in digital assets. The hackers tricked a developer into downloading a seemingly legitimate archive as part of an open-source collaboration.

The Wire — Other Sources

Decrypt

C

Crypto Gift Card Platform Bitrefill Discloses Hack, Points Finger at North Korean Groups

Bitrefill, which lets users swap Bitcoin, Dogecoin and other crypto assets for gift cards, disclosed a breach that took place on March 1.

Source ›

r/CryptoCurrency

LL

Gate.us hired a North Korean remote worker who tapped into Sumsub and Elliptic KYC/AML procedures to launder funds for North Korea

Uncovering a crazy story where a North Korean was hired to work at major crypto exchange gate(.)us and literally tapped into calls with identity verification firm, Sumsub, and blockchain Analytics firm, Elliptic, where they designed the KYC/AML procedures meant to stop North Korea from laundering fu

Source ›

r/CryptoCurrency

LL

North Korean Hackers Exploit Dev Device, Steal Millions in Crypto

A North Korean threat actor, UNC4899, launched a sophisticated attack on a cryptocurrency firm in 2025, stealing millions in digital assets. The hackers tricked a developer into downloading a seemingly legitimate archive as part of an open-source collaboration. The developer transferred it to a co

Source ›

Reuters

C

North Korea supports Iran's choice of new supreme leader, KCNA says - Reuters

North Korea supports Iran's choice of new supreme leader, KCNA says Reuters

Source ›

The Guardian

L

Trump’s Iran war will reinforce North Korea’s view that nuclear weapons are the only path to security

As speculation mounts that Kim Jong-un and Trump could meet this month, analysts say Pyongyang will continue to see nuclear weapons as a matter of survival Middle East crisis – live updates North Korea’s launch last week of a missile from a naval destroyer elicited an uncharacteristically prosaic

Source ›

From the Archive

Browse Archive ›

8 archived stories related to this coverage

Decrypt

C

Crypto Gift Card Platform Bitrefill Discloses Hack, Points Finger at North Korean Groups

Bitrefill, which lets users swap Bitcoin, Dogecoin and other crypto assets for gift cards, disclosed a breach that took place on March 1.

Crypto · archived

Source ›

r/CryptoCurrency

LL

Gate.us hired a North Korean remote worker who tapped into Sumsub and Elliptic KYC/AML procedures to launder funds for North Korea

Uncovering a crazy story where a North Korean was hired to work at major crypto exchange gate(.)us and literally tapped into calls with identity verification firm, Sumsub, and blockchain Analytics firm, Elliptic, where they designed the KYC/AML procedures meant to stop North Korea from laundering fu

Crypto · archived

Source ›

r/CryptoCurrency

LL

North Korean Hackers Exploit Dev Device, Steal Millions in Crypto

A North Korean threat actor, UNC4899, launched a sophisticated attack on a cryptocurrency firm in 2025, stealing millions in digital assets. The hackers tricked a developer into downloading a seemingly legitimate archive as part of an open-source collaboration. The developer transferred it to a co

Crypto · archived

Source ›

Reuters

C

North Korea supports Iran's choice of new supreme leader, KCNA says - Reuters

North Korea supports Iran's choice of new supreme leader, KCNA says Reuters

World · archived

Source ›

The Guardian

L

Trump’s Iran war will reinforce North Korea’s view that nuclear weapons are the only path to security

As speculation mounts that Kim Jong-un and Trump could meet this month, analysts say Pyongyang will continue to see nuclear weapons as a matter of survival Middle East crisis – live updates North Korea’s launch last week of a missile from a naval destroyer elicited an uncharacteristically prosaic

World · archived

Source ›

The Guardian

L

China-North Korea trains to restart, six years after Covid brought them to stop

Travel operators say Chinese and North Koreans can now buy tickets for services leaving this week Passenger train services between China and North Korea are to resume this week, six years after their suspension because of the Covid-19 pandemic, travel operators have said. Train journeys between the

World · archived

Source ›

Associated Press

C

North Korean leader Kim watches cruise missile tests with his daughter

This photo provided by the North Korean government shows its leader Kim Jong Un, right, and his daughter, left, watch what it says the cruise missiles launches from the naval destroyer, the Choe Hyon, via video Tuesday, March 10, 2026, in North Korea. Independent journalists were not given access to

World · archived

Source ›

Al Jazeera

C

N Korea ‘respects’ Iran’s selection of Mojtaba Khamenei as supreme leader

North Korean Foreign Ministry spokesperson condemns the US and Israel's 'unlawful military attack against Iran'.

World · archived

Source ›

Discussion

— onchain

Connect your wallet to join the discussion.

No comments yet. Be the first to share your take.