Ripple DPRK threat intel via Crypto ISAC after $577M DeFi hacks

Ripple says it will share DPRK-linked threat intelligence through Crypto ISAC, arguing that “the strongest security posture in crypto is a shared one.” The move comes as DPRK-associated hacks drove about $577M in DeFi losses in 2026 (around 76% of YTD hack value), concentrated in Drift Protocol and KelpDAO. Ripple’s feed includes contextual enrichment, not just IOCs—covering known domains and wallets plus indicators tied to active campaigns and profiles of suspected DPRK IT operatives. Reported details show a shift toward social engineering and longer-term laundering. On Drift (SOL), TRM estimates ~$285M stolen via a six-month manipulation-enabled pre-authorized withdrawal scheme. On KelpDAO, attackers allegedly compromised RPC nodes, injected false data into LayerZero’s DVN, minted 116,500 unbacked rsETH, then borrowed about $196M ETH on Aave. For traders, this Crypto ISAC intelligence sharing is a potential near-term positive for defense readiness, but it also highlights ongoing state-linked risk—so expect security headlines to keep risk management in focus.