Security research organization Ctrl-Alt-Intel disclosed that suspected North Korean hackers launched attacks against staking platforms and cryptocurrency exchanges, exploiting the React2Shell vulnerability and AWS credentials to infiltrate, steal keys and source code. The activity is consistent with North Korean attack characteristics, but the attribution confidence level is medium.