- •
Drift hack was a six-month social engineering operation
“What we learned was... this was a long-term, at least six-month intelligence operation.”
- •
Attackers used fully constructed identities to build trust
“They had fully constructed identities, including employment histories, public facing credentials and professional networks.”
- •
DPRK actors deposited capital to appear legitimate
“They also deposited $1 million of their own capital.”
- •
Circle didn't freeze stolen USDC for six hours
“Circle declined to freeze the funds while attackers bridged them across chains for six hours during business hours.”
- •
Teams must defend against nation-state level threats
“We have to consider who else might be... being targeted and needs to increase the level of protections they have.”