North Korean state-sponsored hackers have emerged as the dominant force behind a growing wave of blockchain-based malware, according to fresh security research, while crypto exchange CoinEx has announced it is winding down operations in certain markets.
North Korea Leads Onchain Malware Threats
Security researchers report that North Korea, alongside Iran, now accounts for the majority of malicious code being deployed through onchain channels. The trend marks an evolution in how nation-state actors target the crypto sector, using blockchain infrastructure itself as a vehicle for distributing and concealing harmful software.
North Korean hacking groups have long been linked to some of the largest crypto thefts on record, with stolen funds widely believed to help finance the regime's weapons programs. The latest findings suggest these operations are becoming more technically sophisticated, embedding malware in ways designed to evade traditional detection methods.
Nation-state hackers are no longer just stealing crypto — they are weaponizing the blockchain itself.
The reliance on onchain distribution complicates efforts by exchanges and security firms to intercept attacks, since blockchain records are immutable and often decentralized. Analysts warn that the crypto industry will need to adapt its defensive strategies to counter threats that live directly on the networks users depend on.
CoinEx Scales Back and Regional Shifts
In a separate development, exchange CoinEx confirmed it is shutting down services in select jurisdictions, the latest sign of consolidation and regulatory pressure reshaping the Asian crypto landscape. Exchanges across the region continue to face tightening compliance demands and shifting market conditions.
Meanwhile, Malaysia has been highlighted as one of the most crypto-curious Islamic nations, reflecting rising interest in digital assets across parts of Southeast Asia. The recognition points to a broader appetite for crypto adoption even in markets navigating questions around religious and regulatory compatibility.
Key takeaways from the latest regional roundup include:
- North Korea and Iran drive most onchain malware activity
- CoinEx is closing operations in certain markets
- Malaysia ranks among the most crypto-engaged Islamic nations
Together, these developments underscore the dual nature of Asia's crypto scene — expanding public interest on one hand, and persistent security and regulatory challenges on the other.