How 'Booth Babes' at Crypto Conferences Could Lead to Big Hacks Like Drift's

This episode of Unchained dives into the sophisticated, nation-state-level hack of Drift, revealing that the attack was not a sudden breach but a six-month-long intelligence operation involving in-person meetings at crypto conferences. The attackers, likely linked to North Korea's UNC-4736 group, created elaborate fake identities—complete with professional backgrounds, LinkedIn profiles, and even deposits of $1 million—to gain the trust of Drift engineers. They exploited vulnerabilities in development tools like VS Code and secured admin wallet signatures weeks in advance using durable nonces, enabling a near-instantaneous attack. The discussion highlights how the crypto industry remains dangerously unprepared for such threats, with many teams treating security as an afterthought despite handling billions in value. The episode also scrutinizes Circle’s failure to freeze $232 million in USDC during the hack, despite having the technical and legal ability to do so, drawing criticism for prioritizing legal caution over victim protection. In contrast, Tether is praised for its proactive, risk-based approach to freezing stolen funds. The hosts and guests stress the need for better operational security, including air-gapped signing devices, endpoint protection, independent audits, and a cultural shift toward proactive defense. The episode ends with a sobering reminder that the crypto world must evolve beyond reactive measures and embrace a mindset of constant vigilance.