Zerion states that a long-term AI-assisted social engineering campaign linked to North Korean hackers breached an internal hot wallet, highlighting how attackers can bypass technical defenses by targeting employees.
Zerion said attackers linked to North Korean threat actors stole about $100,000 from an internal hot wallet through a long-term, AI-assisted social engineering campaign. The company said the attackers targeted employees rather than directly breaking technical defenses, and that user funds, app infrastructure, and customer assets were not affected. Zerion previously said the attackers obtained some logged-in sessions, credentials, and the private key for the affected wallet. In response, the company took its web app offline, rotated exposed credentials, and reported the wallet address to law enforcement on April 15.