How State-Sponsored Hackers Like DPRK Drain DeFi Protocols: Uneasy Money

The Drift Protocol is down $285 million and Circle has the power to freeze the funds — but won’t. Kain, Taylor, and Luca explain why.

Thank you to our sponsors!

• ⁠⁠⁠⁠⁠⁠⁠Fuse: The Energy Network ⁠⁠⁠⁠⁠⁠ – Shift your energy use and earn rewards.

• ⁠⁠⁠⁠⁠⁠⁠MultiChain Advisors -⁠⁠⁠⁠⁠⁠⁠ The Growth & Capital Markets Partner You Need

The Drift Protocol hack was still unfolding when Kain, Taylor, and Luca went live. Within hours of a suspected admin key compromise, over $285 million had been drained across Solana, with Circle sitting on the ability to freeze the stolen USDC — and choosing not to. 

Taylor Monahan, who was already in an active incident response room, walked through exactly how DPRK malware operates silently on devices for months before striking, why standard antivirus software won’t catch it, and what the Axios supply chain attack revealed about the vulnerability of open source infrastructure. 

Then the conversation shifted to the Claude Code source leak — what it actually reveals about how the most sophisticated agentic coding harness in the world was built, and why Kain thinks a new Anthropic model may be days away.

Hosts:

• ⁠⁠⁠⁠⁠⁠⁠Kain Warwick⁠⁠⁠⁠⁠⁠⁠, Founder of Infinex and Synthetix

• ⁠⁠⁠⁠⁠⁠⁠Taylor Monahan⁠⁠⁠⁠⁠⁠⁠, Security Expert

• ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Luca Netz⁠⁠⁠⁠, CEO of Pudgy Penguins

Links

Unchained:

• Drift Protocol Coverage — Search unchainedcrypto.com for current coverage

Related:

• SEAL 911 — Volunteer crypto incident response group

• Drift Protocol

• Axios npm package — Supply chain attack vector discussed

• CrowdStrike EDR — Recommended endpoint detection tool

• Claude Code — Subject of source leak discussion

Timestamps 🚀 0:00 Introduction 🏦 11:21 The Drift Protocol hack, active as recording starts 🇰🇵 12:42 Whether DPRK is behind the attack, and the Axios connection 💻 18:29 How DPRK malware steals session tokens and bypasses 2FA 🛡️ 27:23 Why EDR beats AV — and why you need a separate device 🔒 39:14 Why Circle’s freeze policy fails in real-time hacks 🚨 51:05 What SEAL 911 is and how to reach them if you’re compromised 🤖 59:55 The Claude Code source leak and what it reveals about agentic dev

Learn more about your ad choices. Visit megaphone.fm/adchoices