Amidst yet one more large hack attributed to North Korea-linked operatives, some crypto builders have confessed they’re passing checks throughout interviews to builders to ensure they aren’t North Korean brokers.
The Idiot-Proof “Kim Jong‑Un Check” For Crypto Builders
As soon as once more, the Democratic Folks’s Republic of Korea (DPRK) is chargeable for some motion movie-sounding strikes.
Following the attribution of the April 1st $285 million assault on Drift Protocol to UNC4736, a North Korea–aligned, state‑sponsored hacking group, a number of crypto business actors have taken to the social community X to share their fears and strategies to fight what basically are DPRK secret brokers.
All particulars on the lengthy‑time period social engineering, pretend skilled personas, in‑particular person convention conferences and compromised tooling employed within the assault may be consulted on a yesterday’s article in our sister’s web site Bitcoinist.
Unbelievable and hilarious as it could sound, essentially the most simple technique a few of these builders have discovered is asking candidates to explicitly insult Kim Jong-Un, North Korea’s regime head, throughout interviews.
Associated Studying
Crypto Builders Share Proof
Yesterday, Tanuki42, an unbiased blockchain safety investigator, shared an precise video of a “North Korean IT employee being stopped lifeless of their tracks upon being required to insult Kim Jong Un”.
Within the video, “Taro Aikuchi” wasn’t simply unable to repeat after the interviewer that “Kim Jong-Un is a fats, ugly pig”: he was greatly surprised and visibly nervous.
Here’s a video of a North Korean IT employee being stopped lifeless of their tracks upon being required to insult Kim Jong Un.
It gained’t work without end, however proper now it’s genuinely an efficient filter. I’m but to come back throughout one who can say it. https://t.co/8FFVPxNm8X pic.twitter.com/KXI5efMo5L
— tanuki42 (@tanuki42_) April 6, 2026
In a distinct video shared by the safety investigator, “Taro” tells him amusingly that he “is aware of North Korea properly”, however then experiences very handy connection points when is requested to say “Fuck Kim Jong-Un”.
The clip I posted was really spherical 2. Right here’s spherical 1 – I inform Taro I’m a North Korea safety researcher, he tells me he “is aware of North Korea properly”. Mysterious connection points once I say “Fuck Kim Jong Un”, which he apologises for on reconnecting.😅 pic.twitter.com/M89KDDmASW
— tanuki42 (@tanuki42_) April 6, 2026
In a while the thread, Tanuki42 confirmed the candidate modified his Telegram deal with, wiped their chat and blocked him after the interview.
🚨@taroaikuchi simply modified his Telegram deal with @cryptotrading2150->@cryptodegen202 – he’d already wiped our chat and blocked me 😭 pic.twitter.com/EcQedYyGG7
— tanuki42 (@tanuki42_) April 6, 2026
His X account and LinkedIn web page additionally disappeared.
Crypto investor and fund supervisor Jason Choi quoted Tanuki42’s thread to echo the message, claiming that quite a lot of crypto founders have shared with him that this check works.
A number of founders in crypto have informed me they ran this check and it genuinely labored https://t.co/DIZHoZDZ0l
— Jason Choi (@mrjasonchoi) April 6, 2026
Crypto founder and RWA‑targeted builder Pav replied to Choi saying that he has been utilizing the tactic 2024, after he discovered he was interviewing a DPRK agent for an engineering place in 2022.
have been utilizing this since 2024 and works like a appeal https://t.co/nYWYIGxrAA
— Parv (@Parv_EP) April 6, 2026
Simon Wijckmans, one other cybersecurity founder and product chief, additionally replied to Choi sharing a clip from certainly one of his personal interviews with a candidate, “William Nation”, who didn’t say that Kim Jong-Un is a dictator after Wijckmans requested him to do it
Yep pic.twitter.com/Aht731yvRc
— Simon (@SimonWijckmans) April 6, 2026
Some Crypto Builders Stay Sceptic
Regardless of the overwhelming proof, the wackiness of the story nonetheless finds flabbergasted nonbelievers.
On a distinct thread from just a few days in the past, Paolo Caversaccio, a Switzerland‑primarily based engineer and entrepreneur targeted on cryptography, privateness and safety, shared certainly one of his makes an attempt to make use of the identical Kim Jong-Un insult tactic to ensure he isn’t working with North Korean spies.
going ahead I’ll request from each exterior contributor to my repos a pleasant Kim Jong Un insult; it’s a straightforward however highly effective option to forestall DPRK dev code (and a few of them are actually good) to be merged (they may by no means ever get the approval to do that). this man handed it… pic.twitter.com/Ms86or5GiP
— sudo rm -rf –no-preserve-root / (@pcaversaccio) April 4, 2026
He then entered an argument with lengthy‑time Ethereum ecosystem developer and founder Micah Zoltu concerning the precise effectiveness of the approach. However Caversaccio’s argument was compelling: he has been coping with DPRK IT staff for greater than three years.
After dealing for greater than 3 years with DPRK IT staff I can confidently declare this filter may be very robust. We’ll in all probability launch some DPRK interviews publicly at some and can hyperlink it right here, they all the time fail with this query. You in all probability suppose my filter is a few random…
— sudo rm -rf –no-preserve-root / (@pcaversaccio) April 5, 2026
Market Implications
Associated Studying
The true deal for merchants proper now isn’t guessing the following meme, however figuring out which groups can defend towards nation‑state attackers.
For some time now, crypto has been coming into a section the place geopolitics, state‑sponsored cyber ops, and HR compliance are as necessary as code audits. North Korean infiltration threat is now a structural issue for the business.
Contemplating this, merchants ought to do not forget that protocols with weak contributor vetting, opaque multisigs, or advert‑hoc governance current elevated tail‑threat that markets will more and more value in.
It’s also advisable to search for tasks that may show stronger operational safety, incident response and KYC for important roles could get pleasure from comparatively stronger valuations and extra sticky TVL.
In the mean time of writing, BTC trades for round $68k on the each day chart. Supply: BTCUSDT on Tradingview.
Cowl picture from Perplexity. BTCUSDT chart from Tradingview.

