North Korean dev hijacks dormant Waves repositories, slips credential-stealing code in wallet updates
CryptoSlateThursday, June 19, 2025 at 12:00:56 AM
A North Korean hacker infiltrated the codebase of Waves Protocol's Keeper-Wallet, sneaking in malicious updates designed to steal credentials. The breach was spotted by cybersecurity firm Ketman, which noticed suspicious activity from a GitHub account linked to the DPRK pushing code to dormant repositories. The wallet hadn’t seen legitimate updates in nearly a year, making the intrusion harder to detect.
Editor’s Note: This isn’t just another crypto hack—it’s a reminder of how state-linked actors exploit open-source projects. North Korea’s cyber ops are notorious for targeting crypto to fund their regime, and this breach shows they’re still finding clever ways in. If you’ve used Keeper-Wallet, it’s time to check for updates (or better yet, switch to something more secure). For the wider crypto community, it’s a wake-up call: abandoned projects are low-hanging fruit for attackers.
— Curated via WP Now’s
