- โข
Drift hack was a six-month social engineering operation
โWhat we learned was... this was a long-term, at least six-month intelligence operation.โ
- โข
Attackers used fully constructed identities to build trust
โThey had fully constructed identities, including employment histories, public facing credentials and professional networks.โ
- โข
DPRK actors deposited capital to appear legitimate
โThey also deposited $1 million of their own capital.โ
- โข
Circle didn't freeze stolen USDC for six hours
โCircle declined to freeze the funds while attackers bridged them across chains for six hours during business hours.โ
- โข
Teams must defend against nation-state level threats
โWe have to consider who else might be... being targeted and needs to increase the level of protections they have.โ

