Crypto firms warned as DPRK laptop farm cases grow
U.S. prosecutors secured two more sentences against people who helped North Korean IT workers pose as U.S.-based employees.
- Two U.S. men received 18-month prison terms for helping North Korean IT workers access company laptops.
- The DOJ said the latest schemes generated over $1.2 million for North Korea and hit nearly 70 firms.
- Crypto.news reports show North Korean IT workers have targeted crypto teams through hiring and remote access.
The Justice Department Matthew Issac Knoot of Nashville and Erick Ntekereze Prince of New York each received 18 months in prison.
The DOJ said the two cases mark the seventh and eighth sentences of U.S.-based “laptop farmers” in five months. The schemes generated more than $1.2 million for North Korea and affected nearly 70 U.S. companies.
How the remote work scheme operated
Laptop farmers received computers that companies had shipped to new remote workers. Prosecutors said Knoot and Prince hosted those devices at their homes, then installed remote desktop software so overseas workers could use them.
That setup made North Korean workers appear to be working from U.S. addresses. DOJ officials said the scheme helped them enter company networks, earn salaries, and send money to North Korea while hiding their real location.
Prince was ordered to forfeit $89,000 that North Korean IT workers paid him. In Knoot’s case, prosecutors said companies paid more than $250,000 to workers linked to his laptop farm. The companies also faced more than $500,000 in audit and system repair costs.
Earlier cases show a wider network
The latest sentences followed another DOJ case in April. Kejia Wang and Zhenxing Wang were sentenced for running laptop farms tied to a scheme that placed North Korean workers at more than 100 U.S. companies.
That case used stolen identities from at least 80 U.S. citizens and generated more than $5 million for North Korea. Prosecutors said the workers also accessed sensitive employer data, including source code and controlled technical information.
Crypto firms remain a major target
Related crypto.news coverage has warned that crypto firms face direct risk from North Korean remote worker schemes. In April, crypto.news reported that security researcher Taylor Monahan said North Korean-linked developers had worked inside more than 40 DeFi projects over seven years.
The warning came as crypto projects faced more attacks linked to social engineering and insider access. Crypto.news also reported that ZachXBT tied at least 25 crypto hacks or extortion cases to North Korean IT workers.
Another crypto.news report said North Korean IT workers used fake documents and stolen identities to obtain jobs in web3, crypto infrastructure, and blockchain development. TRM Labs said many were paid in USDC and USDT before funds moved through wallets, mixers, and conversion services.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Is Cardano Worth Holding in 2026? Lark Davis Compares ADA With Bitcoin Stocks

Crypto Market Could Reach $10 Trillion in Two Years, Raoul Pal Predicts
No-KYC Crypto Exchanges in 2026: Where You Can Still Swap Without ID
VIPEarnings Under Scrutiny Amid High Interest Rates and Platform Recovery
1. U.S. equities gained over the week, while crypto assets declined, reflecting a divergence in risk appetite. From October 3 to 9, the S&P 500 rose 1.15% and the Nasdaq 100 gained 0.24%, while BTC, ETH, and SOL fell 2.31%, 6.84%, and 7.99%, respectively. The U.S. Dollar Index advanced 0.27%, and although the 10-year U.S. Treasury yield declined 3.3 basis points, it remained elevated at 5.244%. High funding costs therefore continued to weigh on risk asset valuations. 2. Weak employment data have not eliminated inflation concerns, while AI and on-chain finance face growing scrutiny over commercial viability. September nonfarm payrolls increased by just 29,000, yet the minutes of the Federal Reserve's September meeting still pointed to the possibility of further rate hikes before year-end. This week's CPI release and major bank earnings will provide important tests of growth and inflation pressures. Revenue recognition and reporting practices in AI, underlying asset rights in RWA, and operating costs for Layer 2 networks are also becoming increasingly important measures of commercial viability. 3. Bitget has completed its phased service restoration, while the Bitget Alliance Program continues to support clients' trading and capital management needs. We completed the planned restoration on October 2 and replenished the Protection Fund to more than $300 million on September 30. According to DefiLlama, assets tracked on the platform rebounded from approximately $5.647 billion on October 1 to $6.223 billion on October 11. This report also outlines VIP level protection, user rewards, and institutional fee incentives to help high-value clients plan their trading activities according to their account type. Assets to watch: BTC, ETH, SOL, SUI, PUMP, gold, JPM, BAC, and ASML. Key areas of focus this week: The October 14 U.S. CPI release; bank net interest income and credit costs; AI cash flow generation; and post-recovery trends in assets held on Bitget, settlement efficiency, and trading conditions. Market data are current through October 9 or the latest local trading day. Official announcements and promotion terms were reviewed through October 12.

