Threat intelligence firm Recorded Future published a detailed report today revealing that North Korea's Lazarus Group has developed a new modular toolkit specifically designed to exploit vulnerabilities in decentralized finance protocols and smart contracts.
The toolkit, codenamed CryptoPhantom, includes automated scanners for common Solidity vulnerabilities, flash loan exploit modules, and cross-chain bridge manipulation capabilities. Researchers attribute at least $340 million in DeFi thefts since January to this toolset.
The report recommends that DeFi projects implement mandatory smart contract audits, real-time transaction monitoring, and multi-signature withdrawal requirements for large transfers as immediate defensive measures against this evolving threat.
