
North Korea targets cryptocurrency exchanges and DeFi protocols to generate hard currency for weapons programs, unlike Russia and Iran which use crypto for payment infrastructure. Security experts say North Korea's comprehensive international sanctions and non-functioning economy force the regime to steal directly from the blockchain. The country employs sophisticated tactics including months-long relationship building and fabricated identities to infiltrate crypto platforms, as demonstrated by the six-month Drift campaign.