Gate News message, April 15 — Zerion disclosed that some of its corporate hot wallets were recently targeted in an AI-driven social engineering attack linked to North Korean hackers, resulting in a loss of approximately $100,000. The company confirmed that user funds, applications, and infrastructure remain unaffected and proactively shut down its web app as a precautionary measure.
This marks the second similar attack this month, following the $280 million theft from Drift Protocol. The incidents highlight how North Korean hacking groups are leveraging AI to optimize social engineering tactics, primarily targeting employees and developers at crypto firms.
According to the Security Alliance (SEAL), the hacker group UNC1069 conducted multi-week, low-pressure social engineering campaigns via Telegram, LinkedIn, and Slack, using AI tools to edit images and videos to enhance attack effectiveness.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Ethereum Foundation: Ketman project identifies 100 North Korean agents within six months
According to an ETH Rangers project recap report published by the Ethereum Foundation on April 17, 2026 (Thursday), within its six-month funding period the Ketman project funded by the Ethereum Foundation identified 100 North Korean IT workers using false identities to infiltrate Web3 organizations, and contacted roughly 53 crypto projects to warn them they may have hired active North Korean agents.
MarketWhisper21m ago
Tennessee proposes allocating 10% of state funds to bitcoin as Senate hearing set for April 21
Tennessee's “Strategic Bitcoin Reserve Act” (SB 2639) will be heard by the Senate Finance, Revenue and Appropriations Committee on April 21 (next Tuesday). The bill was introduced by Senator Kelly Roberts, has passed the Senate Business and Labor Committee, and now moves to the Finance Committee responsible for overseeing tax and spending measures. If it passes, the Tennessee State Treasurer may allocate up to 10% of eligible state funds to bitcoin (BTC).
MarketWhisper59m ago
Tennessee Strategic Bitcoin Reserve Bill Advances to Senate Finance Committee Hearing on April 20
Tennessee's Strategic Bitcoin Reserve Bill is advancing to a Senate Finance Committee hearing on April 20, moving closer to potential enactment into law.
GateNews3h ago
Circle Faces Class Action Lawsuit Over $230M Unblocked USDC in Drift Protocol Attack
Circle faces a class action lawsuit for failing to freeze $230 million in stolen USDC after the Drift Protocol attack. Plaintiffs argue that Circle's protocols allowed attackers to move and convert the stolen funds without intervention, raising concerns about the company's responsibilities in monitoring cross-chain transfers.
GateNews4h ago
Gate Daily (April 17): Musk’s X Money hits a roadblock with New York crypto regulation; Yuga Labs appoints a new CEO
Bitcoin (BTC) is flat at $74,920. A ceasefire between Israel and Lebanon has taken effect, and Trump says Iran agreed not to develop nuclear weapons. Mizuho Bank warns that Musk’s X Money could be affected by New York’s crypto regulation. Yuga Labs replaces its CEO: Greg Solano becomes Chairman of the Board, and Michael Figge takes over. The market is broadly optimistic. A record-high Bitcoin buying wave in the past decade has emerged, suggesting the price may be moving toward $90,000.
MarketWhisper4h ago
Grinex hacked, suspends trading; $15M pause, with the blame pointing to a “hostile nation”
The Kyrgyz cryptocurrency exchange Grinex suspended trading and withdrawals after a large-scale cyberattack and lost approximately $15 million in USDT. The stolen funds were quickly converted into TRX and ETH to reduce the risk of being frozen. Grinex is believed to be the successor to the sanctioned exchange Garantex, becoming the main trading platform for ruble-to-cryptocurrency pairs. In its attack statement, Grinex pointed the incident at an “hostile nation,” but it lacked specific evidence.
MarketWhisper4h ago
