WuBlockchain
North Korean operatives are seeking remote jobs at crypto firms as a way to infiltrate them, Coinbase co-founder and CEO Brian Armstrong said in an interview with Stripe on August 20, 2025. Some candidates received off-camera coaching during video interviews to get past hiring screens.
The tactics went beyond applications. Armstrong revealed that attackers had offered Coinbase support staff hundreds of thousands of dollars to smuggle in phones and photograph screens. In response, Coinbase now requires in-person US orientation for new hires and stronger identity checks before anyone can access sensitive systems, and it has tightened support staff access. The company also put a $20 million reward on information leading to the arrest or conviction of those responsible.
Why it matters
North Korea-linked groups are among the most prolific thieves in crypto, and hiring-based social engineering has become a primary entry point. For an industry built remote-first, recruitment is now a security surface, and Coinbase's in-person onboarding requirement is the most visible admission yet that remote hiring alone no longer holds.
Market impact
Expect identity checks, on-site requirements, and hardened support-staff access controls to spread across exchanges and custody providers as compliance teams copy the Coinbase playbook. The $20 million reward also raises the stakes for insider recruitment attempts.
Source: [A Cheeky Pint with Coinbase CEO Brian Armstrong — YouTube](https://www.youtube.com/watch?v=JeVny5KHj4g)
Frequently asked questions
-
How did North Korean operatives try to get hired at crypto firms?
According to Coinbase CEO Brian Armstrong, they applied for remote positions and some received off-camera coaching from handlers during video interviews to pass hiring screens.
-
What is Coinbase doing to stop these infiltration attempts?
Coinbase now requires in-person US orientation for new hires, applies stronger identity checks before granting access to sensitive systems, and has tightened support staff access.
-
How much is Coinbase paying for information on the attackers?
Coinbase offered a $20 million reward for information leading to the arrest or conviction of those responsible for the infiltration attempts.
-
Did attackers try to bribe Coinbase employees directly?
Yes. Armstrong said attackers offered support staff hundreds of thousands of dollars to smuggle in phones and photograph screens.
-
When did Brian Armstrong reveal these hiring tactics?
He disclosed the details in an interview with Stripe on August 20, 2025, amid renewed attention on North Korean tactics following recent crypto platform hacks.
TheBlock
Crypto Capital Venture
WatcherGuru
CryptoSlate
CoinTelegraph
Crypto News
Crypto Rank News
CoinDesk