Here’s what happened in crypto today

A joint advisory from authorities in the United States, Germany, Japan, and Australia has revealed that North Korean state-sponsored hackers successfully stole more than $10 million by leveraging an elaborate scheme involving fake cryptocurrency job offers, infecting approximately 30,000 devices in the process. This significant cybercrime highlights the ongoing and evolving threat posed by nation-state actors in the digital asset space. Concurrently, in the realm of artificial intelligence, Anthropic has announced its selection of Accenture as an embedded evaluator to assist in assessing its proposed framework for slowing AI development, a move aimed at bolstering safety and ethical considerations in the rapidly advancing field. Meanwhile, in corporate finance, asset manager VanEck has issued a strong critique of Metaplanet’s executive compensation structure, arguing that despite recent efforts by the Bitcoin treasury company to mitigate shareholder dilution, the current arrangements still fall short of adequately aligning management interests with those of its investors.

North Korea’s Cyber Heist: A Sophisticated Recruitment Scam

The recent international alert details how a North Korean hacking group, identified as WaterPlum and also known by the alias Contagious Interview, executed a sophisticated campaign to pilfer at least $10.7 million. The modus operandi involved impersonating recruiters from legitimate cryptocurrency and artificial intelligence companies, preying on unsuspecting job seekers, primarily software developers and IT professionals globally. This operation led to the compromise of an estimated 30,000 devices through the deployment of malicious software.

Background of North Korean Cyber Operations:
North Korea’s engagement in state-sponsored cybercrime is not a new phenomenon; it has a long and well-documented history, particularly concerning the financing of its illicit weapons programs and circumventing stringent international sanctions. Groups like Lazarus Group (also known as APT38 or Bluenoroff), Kimsuky, and Andariel have been linked to numerous high-profile cyberattacks, ranging from the 2014 Sony Pictures hack to the 2017 WannaCry ransomware attack. In the crypto sphere, North Korea has been consistently implicated in some of the largest digital asset heists, including the $625 million Ronin Bridge hack in March 2022 and the $100 million Harmony Horizon bridge exploit in June 2022. These operations underscore a strategic shift towards exploiting the relatively nascent and less regulated cryptocurrency ecosystem for national gain. The estimated annual revenue generated by these cyber operations for Pyongyang is believed to be in the hundreds of millions, if not billions, of dollars, making it a critical component of the regime’s economic strategy.

The WaterPlum Modus Operandi:
According to the joint advisory issued by cybersecurity authorities from Japan, Germany, Australia, and the US, WaterPlum systematically targeted individuals with specialized skills in web design, engineering, blockchain, cryptocurrency, and Web3 technologies. The group utilized a variety of platforms to initiate contact, including professional social media networks like LinkedIn, dedicated online job boards, gig work platforms, and freelance marketplaces. Once a potential victim was engaged, the recruitment process would escalate, culminating in instructions to download and execute malicious files. These files were cleverly disguised as coding assignments necessary for the interview process or as essential fixes for perceived video-conferencing errors, leveraging common elements of remote job interviews to induce trust and compliance. The malware deployed would then grant the attackers unauthorized access to the victim’s device, enabling them to exfiltrate sensitive data, including cryptocurrency wallet credentials, personal financial information, and intellectual property.

Links to Broader North Korean Strategies:
The advisory further connects WaterPlum’s activities to North Korea’s broader, long-standing campaign of placing its IT workers inside foreign companies. This strategy serves a dual purpose: generating foreign currency remittances for the regime and potentially facilitating espionage or further cyber intrusions. Both Japanese and US authorities assess that WaterPlum actors and certain North Korean IT workers operate under the direct purview of North Korea’s Munitions Industry Department, indicating a direct link between these cyber-financial operations and the country’s military and weapons development apparatus. This structure centralizes control and ensures that illicit gains directly contribute to state objectives, bypassing traditional economic channels.

Official Responses and Implications:
The joint advisory represents a concerted international effort to expose and counter North Korea’s evolving cyber threats. By providing detailed insights into WaterPlum’s tactics, techniques, and procedures (TTPs), the authorities aim to enhance public awareness and strengthen the cybersecurity posture of individuals and organizations worldwide. The implications of these attacks are far-reaching:

• Individual Cybersecurity Risk: Job seekers, particularly in high-value tech and crypto sectors, face elevated risks of identity theft, financial loss, and data compromise.
• Economic Impact: The direct theft of millions of dollars impacts victims and indirectly contributes to the proliferation of weapons of mass destruction.
• Trust Erosion: The use of legitimate-seeming recruitment tactics erodes trust in online job platforms and remote work environments, which have become increasingly prevalent.
• Law Enforcement Challenges: Tracing and recovering stolen crypto assets remains a significant challenge due to the pseudonymous nature of blockchain transactions and the sophisticated laundering techniques employed by state-sponsored groups.
• Geopolitical Ramifications: These cyber operations continue to fuel geopolitical tensions and underscore the need for robust international cooperation to combat state-sponsored cyber warfare.

As the digital landscape continues to expand, the sophistication of these state-sponsored threats is expected to grow, necessitating continuous vigilance and adaptation from both cybersecurity professionals and the general public.

Anthropic Embraces Evaluation for AI Slowdown: A Bid for Responsible Development

In a pivotal development for the artificial intelligence industry, Anthropic, a leading AI safety-focused research company, has announced its partnership with Accenture, a global professional services company. Accenture has been selected as Anthropic’s inaugural "embedded evaluator," tasked with helping to assess and implement CEO Dario Amodei’s groundbreaking proposal for slowing the pace of AI development. This move underscores a growing commitment within the AI community to prioritize safety and ethical considerations amidst rapid technological advancements.

The Genesis of the AI Slowdown Proposal:
On September 12, Dario Amodei, CEO of Anthropic, published a comprehensive three-step proposal advocating for a deliberate deceleration in the development of advanced AI systems. Amodei’s initiative was born out of increasing concerns regarding the potential for catastrophic harm should AI progress remain unchecked and outpace our ability to implement adequate safeguards. His proposal highlights the phenomenon of "recursive self-improvement," where AI systems gain the capacity to build increasingly more capable next-generation AIs, creating a self-accelerating cycle that, if "left unchecked, could outrun our ability to understand and control these systems." This concept posits a future where AI’s exponential growth could lead to emergent behaviors that are difficult to predict, manage, or align with human values.

Key Elements of Amodei’s Framework (Inferred):
While the precise details of Amodei’s three-step plan have not been fully disclosed, it is understood to encompass measures that would allow for:

1. Independent Evaluations: Establishing robust, third-party assessments of AI models for safety, bias, and potential risks before deployment.
2. Compute Limits and Resource Allocation: Potentially advocating for a global consensus on limiting the computational power (compute) dedicated to developing frontier AI models, thereby pacing progress.
3. Standardized Safety Benchmarks: Developing and enforcing common benchmarks and protocols for AI safety research, ensuring that systems meet certain thresholds before further development.
4. Regulatory Frameworks: Working towards the creation of national and international regulatory bodies capable of overseeing AI development and deployment.

Reactions from Industry Leaders:
Amodei’s proposal has garnered significant attention and mixed reactions from prominent figures in the AI and tech sectors:

• Positive Endorsements: Sam Altman, CEO of OpenAI, and Elon Musk, CEO of SpaceX and Tesla, both responded positively to Amodei’s call for caution. Their support reflects a broader sentiment among some industry leaders that proactive measures are necessary to manage the inherent risks of advanced AI. Altman, whose company OpenAI has been at the forefront of generative AI, has previously advocated for careful regulation and international cooperation on AI safety. Musk has long been a vocal proponent of AI safety, frequently warning about existential risks.
• Skepticism and Counterarguments: In contrast, Jensen Huang, CEO of Nvidia, a company whose hardware is foundational to AI development, expressed skepticism regarding the necessity of such an AI slowdown. Huang argued that regulation of this nature could stifle innovation, impede economic progress, and potentially create antitrust issues by favoring established players. His perspective underscores the tension between rapid technological advancement and the imperative for safety, highlighting the competitive dynamics within the AI industry.

Accenture’s Role as Embedded Evaluator:
Anthropic’s decision to bring Accenture on board as its first embedded evaluator signifies a practical step towards operationalizing Amodei’s framework. As an "embedded evaluator," Accenture will likely play a multifaceted role:

• Auditing Safety Protocols: Conducting independent audits of Anthropic’s AI development processes, ensuring adherence to internal and external safety standards.
• Risk Assessment: Developing methodologies to identify, quantify, and mitigate potential risks associated with Anthropic’s AI models.
• Framework Development: Collaborating with Anthropic’s researchers to refine and expand the AI slowdown framework, making it more robust and applicable to a wider range of AI systems.
• Transparency and Accountability: Providing an external layer of accountability and transparency to Anthropic’s safety initiatives, potentially setting a precedent for the industry.

Accenture’s expertise in large-scale system integration, risk management, and ethical AI consulting positions it uniquely to assist Anthropic in this complex endeavor.

Broader Implications for AI Governance:
This partnership and Amodei’s proposal carry significant implications for the future of AI governance:

• Industry Standards: It could catalyze the development of industry-wide standards and best practices for AI safety, moving beyond voluntary guidelines to more structured evaluation processes.
• Regulatory Precedent: Anthropic’s proactive approach, particularly with external evaluation, could influence future regulatory discussions and policy-making at national and international levels.
• Balancing Innovation and Safety: The initiative highlights the ongoing challenge of balancing the immense potential benefits of AI with the imperative to manage its risks responsibly.
• Role of Consultancies: It signals an expanding role for professional services firms in the ethical and safe development of frontier technologies, moving beyond traditional IT consulting to strategic advisory on existential risks.

The collaboration between Anthropic and Accenture marks a crucial step in the ongoing global dialogue about responsible AI development, demonstrating a tangible commitment to addressing the complex challenges posed by rapidly advancing artificial intelligence.

VanEck Challenges Metaplanet’s Executive Compensation Amid Dilution Concerns

Asset management firm VanEck has issued a sharp critique of Metaplanet’s executive compensation structure, asserting that the Bitcoin treasury company’s recent attempts to curtail shareholder dilution are insufficient and fail to adequately align management interests with those of its investors. This public rebuke, detailed in a recent report, casts a spotlight on corporate governance practices within the emerging digital asset corporate sector.

Context of Digital Asset Treasury Companies:
The concept of a "Bitcoin treasury company" gained prominence with MicroStrategy, led by Michael Saylor, which pioneered the strategy of holding significant amounts of Bitcoin on its balance sheet as a primary treasury reserve asset. This model aims to provide shareholders with indirect exposure to Bitcoin’s price appreciation, often positioning itself as an alternative investment vehicle to direct Bitcoin ownership. As this model gained traction, other companies like Metaplanet have followed suit. However, with this innovative approach comes the traditional scrutiny of corporate governance, particularly regarding executive compensation and its potential impact on shareholder value.

VanEck’s Report and Findings:
In a comprehensive report released on a Friday, VanEck, a prominent asset manager with a growing focus on digital assets, analyzed executive compensation across the 10 largest digital asset treasury companies. The report specifically labeled Metaplanet’s compensation structure as "Bad," placing it in the lowest possible category among its peers. VanEck’s criticism centered on two key metrics:

1. Equity Plan Size: Metaplanet’s equity plan was found to be equivalent to 14.7% of its fully diluted shares. This figure represents the total potential dilution that could occur if all outstanding stock options, restricted stock units, and other equity incentives were exercised.
2. Officer Exposure: The report highlighted Metaplanet’s officer exposure at 8.2%. This metric typically refers to the percentage of a company’s shares held by its executive officers, which is often seen as an indicator of management’s alignment with shareholder interests. A higher exposure can suggest that executives have a direct financial stake in the company’s long-term performance.

Comparison with Peers and MicroStrategy:
VanEck’s analysis starkly contrasted Metaplanet’s figures with the average of the other nine companies reviewed. Metaplanet’s officer exposure of 8.2% was roughly ten times higher than the peer average of 0.8%. Similarly, its overall equity plan, at 14.7%, was nearly four times the average of its competitors.

For comparison, MicroStrategy, the largest corporate Bitcoin holder and the standard-bearer for this business model, received a "Good" rating from VanEck. MicroStrategy’s equity plan was noted as being equal to a modest 2% of its fully diluted shares, with officer exposure at 0.5%. VanEck specifically praised MicroStrategy’s approach, noting that its equity reserve is fixed, and any increases to the plan necessitate a shareholder vote – a crucial mechanism for protecting investor interests from excessive dilution.

The Issue of Shareholder Dilution:
Shareholder dilution occurs when the percentage of ownership of existing shareholders is reduced due to the issuance of new shares. This can happen through various means, including the exercise of stock options, convertible bonds, or new equity offerings. While executive compensation plans that include equity are common and designed to incentivize performance, excessive or poorly structured plans can significantly dilute existing shareholders’ ownership and future earnings per share, thus diminishing the value of their investment. VanEck’s criticism implies that Metaplanet’s current structure, despite any "recent efforts to curb shareholder dilution," still presents a substantial risk to long-term shareholder value.

Implications for Metaplanet and the Industry:
VanEck’s public criticism carries several implications:

• Investor Confidence: Such a strong negative rating from a respected asset manager can erode investor confidence in Metaplanet, potentially impacting its stock price and its ability to attract new capital.
• Pressure for Reform: It places significant pressure on Metaplanet’s board and management to re-evaluate and revise its executive compensation structure to better align with industry best practices and shareholder expectations.
• Corporate Governance Scrutiny: The report highlights the increasing scrutiny of corporate governance practices within the nascent and rapidly evolving digital asset industry. As these companies mature and attract institutional investment, transparency, accountability, and fair compensation practices become paramount.
• Role of Institutional Investors: It underscores the critical role of institutional investors like VanEck in advocating for shareholder rights and holding companies accountable for their governance decisions.

The dialogue initiated by VanEck’s report serves as a reminder that even in innovative sectors like digital asset treasury companies, adherence to sound corporate governance principles remains fundamental to building long-term shareholder value and maintaining investor trust.