ChainThink report: The Ethereum Foundation has recently released a summary report on the ETH Rangers security initiative, disclosing that during a six-month security grant program, researchers identified approximately 100 suspected state-sponsored cyber actors, including infiltrators from North Korea (DPRK), who have penetrated multiple Web3 projects.

According to official announcements, the investigation was advanced through initiatives such as the "Ketman Project," with warnings issued to around 53 blockchain projects. These individuals infiltrated development teams under false identities, participated in fund flows and technical roles, and in some cases, associated funds have been frozen, amounting to hundreds of thousands of dollars.

The security grant program has collectively frozen or recovered funds exceeding $5.8 million, documented over 785 vulnerabilities, and addressed 36 security incidents.

The security team has integrated this intelligence into the threat analysis framework for the Lazarus Group and disclosed findings at security conferences such as DEF CON, highlighting that the security threats facing the Ethereum ecosystem have evolved from isolated vulnerability exploitation to systemic risks involving nation-state actors.

The report notes that North Korean hackers have also infiltrated projects via methods such as "remote IT workers," exploiting attack vectors including account takeovers, penetration of freelance platforms, and illicit fund transfers, making them a top priority for industry-wide mitigation efforts.

The Ethereum Foundation emphasizes that securing decentralized networks requires "decentralized defense," and will continue supporting security research, threat intelligence, and talent development to counter escalating nation-state cyber threats.