# North Korea · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/north-korea.json · RSS: https://drains.watch/t/north-korea/feed.xml

- [Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent](https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026) (closed, Medium, Still active, since Feb 28, 2026)
- [Upbit loses about $36M as Solana hot wallet is drained; Lazarus suspected](https://drains.watch/i/upbit-solana-hot-wallet-hack-nov-2025) (closed, Critical, Contained, since Nov 27, 2025)