North Korean hackers target spot Bitcoin ETFs: BlackRock in their crosshairs 📉⚠️
While retail investors discuss the $6.3 billion Binance hack, OneKey experts are sounding the alarm: the next target of the Lazarus group could be BlackRock’s IBIT fund, which manages $63 billion.
A look at the threat through the lens of market structure:
-Point of concentration: The main risk with ETFs is centralization. Nearly all 815,000 BTC in the IBIT fund are held by a single custodian — Coinbase. That makes it an ideal target for well-funded attackers.
-Targeting people, not the blockchain: Directly hacking Coinbase wallets is impossible. But hackers use sophisticated phishing attacks against employees, tricking them into manually signing fraudulent transactions, as has already happened with Bybit and Binance.
-The illusion of protection: The custodian’s insurance would cover only a small fraction of hypothetical losses. In the event of a major theft, the IBIT fund would lose a real percentage of its assets, immediately hitting investors in the pocket.
Bottom line: Concentrating billions in a single set of hands creates a dangerous imbalance for the entire industry. Clear your charts of the illusion of “absolute institutional security.” Use personal self-custody and always verify transaction addresses on your devices’ physical screens.
While retail investors discuss the $6.3 billion Binance hack, OneKey experts are sounding the alarm: the next target of the Lazarus group could be BlackRock’s IBIT fund, which manages $63 billion.
A look at the threat through the lens of market structure:
-Point of concentration: The main risk with ETFs is centralization. Nearly all 815,000 BTC in the IBIT fund are held by a single custodian — Coinbase. That makes it an ideal target for well-funded attackers.
-Targeting people, not the blockchain: Directly hacking Coinbase wallets is impossible. But hackers use sophisticated phishing attacks against employees, tricking them into manually signing fraudulent transactions, as has already happened with Bybit and Binance.
-The illusion of protection: The custodian’s insurance would cover only a small fraction of hypothetical losses. In the event of a major theft, the IBIT fund would lose a real percentage of its assets, immediately hitting investors in the pocket.
Bottom line: Concentrating billions in a single set of hands creates a dangerous imbalance for the entire industry. Clear your charts of the illusion of “absolute institutional security.” Use personal self-custody and always verify transaction addresses on your devices’ physical screens.
