Why You're Getting Weird Applications in Web3 (And What North Korea Has to Do With It)

Why You're Getting Weird Applications in Web3 (And What North Korea Has to Do With It)

Date: 09 Jun 2025

Let’s get real.

If you’ve been hiring in Web3 long enough, you’ve probably had a few things that felt… off.

A dev with a flawless resume who dodges video calls.

A “senior engineer” who can’t answer basic questions.

A suspicious GitHub that looks copy-pasted from another candidate’s work.

You’re not imagining things.

North Korean actors are actively applying to Web3 jobs — and in some cases, they’re getting them.

Why Web3? Because It’s Remote, Open, and Fast.

North Korea isn’t targeting Web3 because they love crypto.

They’re targeting it because:

It’s global — anyone can apply, from anywhere.
It’s fast — startups don’t have time to run deep background checks.
It’s lucrative — access to wallets, tokens, and infrastructure can mean big payoffs.

And in a world where devs get hired in DMs and paid in USDC, slipping through the cracks is easier than you think.

What Are They After?

North Korean “freelancers” — often under fake names and identities — are not just looking for a paycheck.

They’re:

Gaining access to infrastructure, smart contracts, and security systems.
Building trust inside early-stage projects with minimal security.
Positioning themselves to extract value later — through exploits, social engineering, or wallet access.

They don’t need to steal millions in one go. Sometimes, just learning how your system works is enough.

What the Red Flags Look Like

Refusal to join live video calls
Over-polished resumes with vague timelines
GitHub accounts created recently or with no real commit history
“Teams” of devs applying together from similar IPs
Highly technical candidates who avoid deep questions about past roles

And here's the brutal part:

They are getting better.

AI-generated responses. Fake LinkedIn profiles. Even staged interview calls with voice actors.

What You Can Do (Besides Freak Out)

This isn’t fear-mongering — it’s a wake-up call.

Start verifying identities. Video calls, government ID, and real references.
Review code contributions. Don’t just skim. Audit.
Segment access. No junior dev should have mainnet keys or smart contract deployment rights.
Talk to your hiring partners. Agencies like ours spot these patterns across multiple clients.

And if something feels off? Trust your gut. Dig deeper.

The Bigger Truth

If you’re hiring in crypto, you’re not just building a company.

You’re sitting at the edge of global geopolitics, finance, and cybersecurity.

You think you’re hiring a backend dev from Singapore?

You might be onboarding a government-sponsored asset from Pyongyang.

Welcome to Web3 hiring in 2025.
Wild, risky — and very real.

And if you want help navigating it with people who’ve seen the worst of it?

We’re here for it. Let’s talk. Reach out to us HERE

Still struggling to stand out?

Neil offers one-on-one career consultations to help you get clear, get seen, and get hired. HERE

Looking for a job? Reach out to us HERE

Back to News

Why You're Getting Weird Applications in Web3 (And What North Korea Has to Do With It)