North Korean developers gain access to Waves Wallet code repository, maliciously submitting or stealing user Private Keys.

[Chain News] On June 19, it was reported that a North Korean developer gained elevated permissions in the Keeper-Wallet codebase of Waves Protocol. The account "AhegaoXXX" has been pushing updates to the dormant codebase since May 2025, and this account has been confirmed to be associated with a North Korean IT outsourcing organization. Code review revealed that a certain submission added functionality to send wallet logs and runtime errors to an external database, potentially stealing mnemonic phrases and Private Keys. Although this branch has not been merged, the attacker has released six malicious NPM packages that had not been updated for a long time by controlling the account of former Waves engineer Maxim Smolyakov.

The security report indicates that this incident shows North Korean hackers shifting from ordinary outsourcing infiltration to direct control of code repositories. It is recommended that development teams strengthen supply chain protection, including auditing contributor permissions, cleaning up dormant accounts, and monitoring repository redirection. Currently, the download volume of the affected software is low, but there is a risk of credential leakage for Waves users updating the Keeper-Wallet.

View Original
The content is for reference only, not a solicitation or offer. No investment, tax, or legal advice provided. See Disclaimer for more risks disclosure.
  • Reward
  • 7
  • Share
Comment
0/400
MoonRocketTeamvip
· 7h ago
Wow, another project has been wrecked, watching the bankruptcy list accelerate crazily.
Reply0
ZKProofstervip
· 10h ago
technically speaking, this is why we need permissioned repos smh
Reply0
GateUser-0717ab66vip
· 10h ago
It's really hard to defend against supply chain attacks now.
Reply0
PortfolioAlertvip
· 10h ago
Anyone can steal your coins when locked.
Reply0
AirdropBlackHolevip
· 10h ago
Whose wallet hasn't been targeted?
Reply0
BrokenDAOvip
· 10h ago
The inertia of code governance is really terrifying... it's just a matter of time before it collapses.
Reply0
ChainSauceMastervip
· 10h ago
Once again, I was played by North Korea.
Reply0
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)