Solana Ecosystem on High Alert as Google Reports Surge in North Korean Attacks on European Initiatives

Google Cloud Flags Rising North Korean Cyber Threat to European Solana Projects

Google Cloud has sounded the alarm over an increase in cyber intrusions targeting European blockchain initiatives, particularly those built on Solana, by North Korean IT operatives masquerading as remote workers.

In a report published Wednesday, the tech giant revealed that these Democratic People’s Republic of Korea (DPRK) actors are shifting their focus away from the U.S. due to growing legal scrutiny and indictments, and are now infiltrating European companies using fake identities and fabricated credentials.

One DPRK-linked developer was found to be managing 12 distinct personas across the U.S. and Europe, complete with fake job references and digital connections designed to establish credibility with recruiters.

The level of technical sophistication is notable. Operatives have worked on a wide range of blockchain projects—from building token-hosting platforms with React, Next.js, and CosmosSDK to creating Solana-powered job boards and deploying smart contracts using Anchor and Rust. In one instance, an AI-based web app was developed using Electron and integrated with blockchain layers.

The report highlights that companies with bring-your-own-device (BYOD) policies are particularly vulnerable, with DPRK workers exploiting these flexible setups to launch internal attacks.

“January 2025 saw a marked increase in such activity,” the report stated. “DPRK IT workers are leveraging global expansion strategies, extortion methods, and virtualized infrastructure to scale their operations.”

North Korea’s cyber operations have become one of the most significant threats to the crypto space. In 2024 alone, DPRK-affiliated hackers were responsible for stealing an estimated $1.3 billion from blockchain projects—and the trend has continued into 2025, with a $1.5 billion exploit on Bybit in February.

Google Cloud’s findings underscore the urgent need for stronger hiring practices and security controls across both U.S. and European blockchain firms.