Key Takeaways

• Nation-state actors are increasingly involved in cyber attacks on crypto companies.
• The intensity of cyber attacks on the crypto industry is on the rise.
• Many crypto companies are not adequately addressing their security risks.
• North Korea is a prolific actor in the crypto space, using hacking as a revenue source.
• Security measures must account for the possibility of trusted individuals being compromised.
• Companies need to rethink their security protocols and access permissions.
• Hiring practices can inadvertently create security vulnerabilities.
• The open-source nature of crypto projects can expose them to sophisticated attacks.
• The Drift hack was likely orchestrated by a nation-state actor.
• Enhanced security measures are necessary due to the growing risk environment.
• There is a significant shift towards nation-state-sponsored activities in the crypto sector.
• The involvement of individuals with DPRK in the crypto industry can vary widely.
• Security protocols should be tight and possibly air-gapped for sensitive operations.
• Companies should be vigilant about the security risks of hiring external personnel.
• The open-source development model of crypto projects poses unique security challenges.

Guest intro

Amanda Wick is Founder and Chief Executive Officer of the Association for Women in Cryptocurrency. She previously served as Chief of Legal Affairs at Chainalysis after nearly a decade as a federal prosecutor at the US Department of Justice, specializing in crypto money laundering. She is also a Principal with Incite Consulting, advising crypto businesses on risk and compliance strategy.

The rising threat of nation-state actors in crypto

• The attack on Drift was a sophisticated operation likely orchestrated by a nation-state actor.

  — Amanda Wick

• Nation-state actors use proxies and in-person communications to disguise their origins.
• The involvement of nation-state actors highlights the advanced nature of threats in the crypto industry.

• The intensity of attacks on crypto companies is likely increasing.

  — Amanda Wick

• There is a growing risk environment for crypto firms, necessitating enhanced security measures.

• The crypto sector is increasingly facing threats from nation-state sponsored activities.

  — Amanda Wick

• The shift towards nation-state-sponsored activities requires heightened awareness and security.
• North Korea stands out as a particularly prolific actor in the crypto space.

Security gaps in the crypto industry

• Many companies in the crypto sector are not adequately addressing their security risks.

• I worry about the number of companies that don’t train at that level.

  — Amanda Wick

• Some companies remain lax about the security of their operations despite financial stakes.
• The lack of security awareness could have serious consequences for the industry.

• Companies need to reconsider their security protocols and who they allow access to their spaces.

  — Amanda Wick

• Hiring practices can inadvertently create security vulnerabilities.
• Companies should be vigilant about the security risks of hiring external personnel.
• Security protocols should be tight and possibly air-gapped for sensitive operations.

North Korea’s role in crypto hacking

• North Korea uses hacking as a significant source of revenue in the crypto space.

• North Korea definitely stands out as a particularly prolific actor.

  — Amanda Wick

• The involvement of North Korea emphasizes the significance of nation-state actors in cybercrime.
• The state’s motivations in the crypto space are primarily financial.
• The specific involvement of North Korea highlights the need for enhanced security measures.
• Understanding the role of nation-state actors is crucial for addressing cyber threats.
• The prominence of North Korea in crypto hacking underscores the need for vigilance.
• The state’s activities in the crypto space are a critical concern for security professionals.

The complexity of interactions in the crypto industry

• The involvement of individuals with DPRK could range from unaware to fully aware.

• We have to entertain the possibility that all of these factors are possible.

  — Amanda Wick

• The nuanced risks associated with interactions in the crypto industry require vigilance.
• Security measures must account for the possibility of trusted individuals being compromised.
• The complexities of interactions highlight the need for comprehensive security protocols.
• Understanding the risks of interactions is crucial for safeguarding sensitive information.
• The potential for compromised individuals underscores the importance of security awareness.
• Vigilance is necessary to navigate the complexities of the crypto industry’s interactions.

The impact of hiring practices on security

• Hiring attractive individuals to draw in attendees can create security vulnerabilities.

• What conversations are they collecting, what PII are they collecting?

  — Amanda Wick

• Promotional tactics may compromise sensitive information if not properly managed.
• The connection between marketing strategies and security risks requires careful consideration.
• Companies should assess the security implications of their hiring practices.
• The potential for security vulnerabilities highlights the need for comprehensive protocols.
• Understanding the risks of hiring practices is crucial for maintaining security.
• Security measures should address the potential vulnerabilities created by promotional tactics.

The vulnerability of open-source crypto projects

• Crypto projects can be vulnerable to sophisticated attacks due to their open-source nature.

• This is certainly a vector for DPRK to get more involved.

  — Amanda Wick

• The open-source development model poses unique security challenges for crypto projects.
• Malicious actors may exploit open-source contributions to gather intelligence.
• The risks associated with open-source projects require enhanced security measures.
• Understanding the vulnerabilities of open-source projects is crucial for safeguarding operations.
• The potential for sophisticated attacks highlights the need for comprehensive security protocols.
• Security measures should address the unique challenges posed by open-source development.