Intelligence Scoop: How North Korean Hackers Stole $6.3bn in Crypto

0:00for exclusive interviews bonus episodes ad-free listening early access to series first look at live show tickets a weekly newsletter and discounted books join the declassified club at the rest is classified.com Did North Korean hackers just get away with the biggest heist in history? And why does Kim Jong-un run his intelligence agencies like crime syndicates? Well, welcome to The Rest is Classified. I'm David McCloskey. And I'm Gordon Carrera. And this time we are going to be looking at how you steal $6.3 billion in 20 minutes and then use it to make nuclear weapons. Yes, it is the mad world of North Korean hackers and crypto heists. That's right. Last week, we looked at preppers and recommended keeping some cash under your bed.

0:56Unfortunately, David, you keep yours in crypto, so you're now funding the North Korean nuclear and missile program, which is sad, I guess. Oh, it's very sad. Sad times. I also checked and $6.3 billion in $100 bills would require 6,000 of those attaché cases that you see in the films to carry away all the loot. So we're going to be looking at how they did it and also the worst job interview in the world, I think. So this time we'll be looking at how this very Ocean's Eleven style heist went down and crucially explain how it all ties back to the hermit kingdom of North Korea and the crazy way that they put their spies and hackers to work. So let's begin this story of the heist with the victim. But first, a word from our sponsors, HP. leaks. It's the same in business. Leaders face a constant battle against strict timelines,

2:06mismatched tools, and the worry their security isn't as tight as they think it is. Which is why HP approaches technology not as a collection of gadgets, but as an integrated system. And crucially, that protection is built in at hardware level. It runs quietly in the background, blocking threats without requiring constant specialist oversight. With a team of business advisors, HP helps businesses of all sizes find technology that fits their needs and budget. To see how HP helps businesses work securely and productively, visit hp.com forward slash classified. Trick listeners also benefit from 10% off HP business technology with the code TRICK10. currencies that you really think about the exchange rate, the fee, and what might be hidden away in

3:05the small print. Whether you're living abroad, paying someone overseas, or just trying to manage your money across borders, you want a fair exchange rate, an easy transfer, and no surprises along the way. Wise keeps things simple. Wise is a smart way to move the currencies you need around the globe. It works in more than 160 countries and with over 40 currencies. Most transfers arrive instantly. Wise uses the mid-market exchange rate, like the one you see on Google, with no markups or hidden fees. So when money needs to move, you can see the rate, know the fee, and get on with it. Join millions saving billions on hidden fees by downloading the WISE app today. Be smart, get wise, T's and C's apply. For adults with Crohn's disease or ulcerative

3:52colitis symptoms, every choice matters. Tramphya offers self-injection or intravenous infusion from the start. Tramphya is administered as injections under the skin or infusions through a vein every four weeks, followed by injections under the skin every four or eight weeks. If your doctor decides that you can self inject Tramphya, proper training is required. Tramphya is a prescription medicine used to treat adults with moderately to severely active Crohn's disease and adults with moderately to severely active ulcerative colitis, serious allergic reactions, increased risk of infections or lower ability to fight them, and liver problems may occur. Before treatment, get checked for infections and tuberculosis.

4:34Tell your doctor if you have an infection, flu-like symptoms, or need a vaccine. Explore what's possible. Ask your doctor about Tramfiya today. Call 1-800-526-7736 to learn more or visit tramfiyradio.com. So the victim of this heist is Bydance, which is the world's largest cryptocurrency exchange. But before we get into the victim more deeply, it's probably worth setting up just briefly crypto. What was actually stolen? So crypto is digital currency, which exists in ones and zeros. Most famous is Bitcoin. It can be moved quickly and anonymously. And the point about it is that it was set up to be decentralized and free from state control, things like central banks. There is a risk that if you

5:26keep it in your own digital wallet, the details of your crypto, and you lose your password or your computer, it's gone. There's a famous story of a guy from Newport in Britain whose girlfriend mistakenly threw away his computer in 2013, which had 8,000 Bitcoins on it, worth about $650 million today. And it went into a landfill and he's been trying to get it back ever since. So that's one of the risks of crypto. One of the safer things to do is to store it somewhere like a digital exchange. They're also the places where you can trade it and buy and sell different types of digital currencies. They're not quite like a bank, even though they sound like one, because they're not regulated or protected in the same way. But Binance is the biggest and

6:10most important of these digital currency exchanges. And to your point on differences with a bank, the transactions are, for the most part, not reversible, which is also going to be an important part of this. So Binance, crypto exchange, kind of like a bank, but not really. Now, let's maybe set up Binance a bit. So it's founded in 2017. It is one of the most important crypto exchanges. And it is estimated that Binance holds about $170 billion in assets and trades about $95 billion worth of crypto every day. I did look this up. Those numbers, of course, sound large. If you compare the assets, though, to a really big US bank, it's pretty tiny. But if you compare the trading volume, it's quite significant, which I think is going to be an important part of this story as well. So in terms of dollars or value that Binance holds, it's not particularly massive when you

7:11compare it to Bank of America or JP Morgan. But when you look at the volume of movement, the trade volume, it's quite high. Yeah, that's right. And Binance was founded by Changpeng Zhao, known as CZ. And originally, it was founded in China, but then it was moved. And it's a decentralized company to some extent with its leadership based in lots of places around the world. That's the whole kind of crypto ideology. You're not under one state. Now, CZ pleads guilty to money laundering in 2023, and Binance pays a massive $4.3 billion fine to the US government, basically for letting criminals, terrorists, and sanctioned states use the platform. Because of course, one of the advantages of crypto, because as we said, it's pretty anonymous,

7:56means those kind of bad guys want to use it. He actually served a four-month prison sentence, but then was pardoned by President Trump. And he's still the major shareholder, although he technically doesn't run the company anymore. So that's the key figure inside Binance. And Binance had helped facilitate, fun fact, a $2 billion investment in World Liberty Financial, which is the crypto company that had been launched by Trump and his sons exactly at the time when Binance was lobbying for the pardon. What a coincidence. A fun fact, unrelated to the heist, but still worth knowing. I think there's a great quote from Willie Sutton, the famous bank robber, who's asked in the 1930s why he robs banks. And he says, because that's where the money is. And it is true now that these crypto

8:47exchanges increasingly have a lot of the money. That's right. I did discover, I was looking into Willie Sutton and on the FBI page, it says he actually wrote an autobiography called Where the Money Is or Where the Money Was. I love the idea of a bank robber who writes his autobiography referencing his best quote. But you're right. In the old days, he would be a traditional bank robber. We're going to look at a very modern heist and a very digital heist. So let's set up what happened. So just after 8pm London time, 4pm Eastern time in the US, October 29th, massive amounts of money start to move out of Binance hot wallets. And these are the wallets which are connected to the internet and people can trade off. And the crucial thing is the speed

9:29of this. This is happening really fast. But it's also because of the way the ledger works, it's public. So even though it's anonymous who's doing what, you can see money move from wallets and moving in and out, and in this case, out of Binance. So of course, they're seeing a massive flow of money and there's total panic inside the company. They set up a war room, but it's interesting because they're so dispersed. You've got 100 people on a screen in a massive video conference call, according to the reports. Some are in Abu Dhabi, some are in Hong Kong. They're talking in Chinese. They're talking in English. They're kind of muting. They're unmuting. They have no headquarters, right? The company has no actual headquarters. It's hard to-

10:14Hard to coordinate. And then the problem is you can imagine these people are watching literally in real time as billions are being stolen from their company. So it is like watching on CCTV as robbers are taking bags of money out of your vault of your bank, Willie Sutton style. So how did they do it? I mean, I think this is the big question is how in the world did these hackers, we'll come to who they are in a minute, but how did they actually pull this off? How did they get inside the crypto vault, as it were? It's really high end and really fascinating. So it starts way back in June when an engineer who works on the wallets that hold crypto downloaded a tampered piece of software after just looking for a bit of software

11:03on a search engine. That's first mistake. These all start the same way. Every one of these hacking stories we've done is someone downloads something or clicks a link, right? It's crazy. Now, what's interesting is the security team at Binance spot this and they replace his laptop and change his passwords. But it meant that the hackers, and we'll come to who they are, had identified someone who worked on the wallets and who had access to the engineering around the wallets. Then the next stage, this is the crazy bit, September, a different engineer is contacted through a legitimate job hunting platform, and his profile says he works at Binance, by someone posing as a project director. And there's a first round interview with an HR representative, and then comes a second

11:53round interview. So this guy thinks he's doing well, who claims to be the CEO of the company recruiting him or trying to recruit him, except it's not real. Do we know yet what the cover name of this company was because i do think if you're sitting for an interview you would presumably do some research on the company that you were being interviewed for right like so yeah this engineer just hadn't done that or that had the had the hackers set up like a website to make the company seem real maybe we don't know yet for a moment now i thought it was because maybe you were worried. You just had a job interview. You just want to double check it wasn't the North Koreans. I've been doing all these job interviews with companies.

12:34They just, things come to me and I just accept the Zoom calendar invite and just roll with it. No, but I mean, how did they, was there a cover for this or was it just? They must have done a pretty good cover. I mean, it is true that the North Koreans have been perfecting this strategy for a while. So they've done things like putting their own fake IT workers into real companies and then they use it to steal money or to get information. But they've also been running these fake interviews for real workers to try and track them. So in this case, what we know is in the first round interview, the HR representative conducts a live video interview with the engineer. So it's a proper conversation and the interviewer shares a social media account with him, including

13:16personal photos and videos on the platform to build trust. But then the second interview, which is with the CEO, is conducted in a social chat app. That's all they'll say. Binance, we don't know which one. And near the end of the interview, here's the crucial tell. The job applicant, the engineer at Binance, is instructed to download an assignment, which unfortunately contains very high-end malicious code and goes to work on his work computer very stealthily. He does the interview on his work computer. Yeah, and that looks like part of the problem, I think. And we've seen this before where people have done these interviews and they download stuff and it's to steal the keys to their own personal crypto wallet so that some hacker can empty

14:04their crypto account. But why just steal one wallet when you can get keys to the vault? Because what the hackers then do on October the 20th is use that compromised computer from the job interview person, plus an internal tool, an AI tool inside Binance, to reach the computer of the first engineer, the one back in June. He's the person or she's the person who develops the wallets and structures them. So they get hold of their access and someone else's. And now they have high end access to the way the crypto wallets sign to move money. They're inside the system. Nine days later, October 29th, they use that to strike and move the money. So it's obviously planned over months. And I think we mentioned the Ocean's 11

14:52parallel upfront, that the reconnaissance and the planning and having everything at the right position, having the timeline worked out, that is the hard work. The actual heist can happen quite quickly. One of the fascinating pieces about this is the speed, right? It is the speed with which they've moved everything and the way that they fragmented the crypto through multiple wallets and accounts and back and forth. Was that AI powered or do we know yet? Possibly a bit. Possibly a bit because you're right. The crucial bit is once they're in, they've got access to move money. They've got to do it fast because Binance will see it happening. Everyone's going to see it happening because it's public. And so immediately you're at a race against time because Binance can reach out to

15:41other exchanges where some of that money is being moved into and ask them to freeze any money coming into them from Binance. So about half of the money actually gets frozen because it's moved to other exchanges who agree to freeze it. But a lot of the rest of the money is moving to other exchanges, decentralized exchanges, where you can't freeze the money. So about half at least goes to those places. And the crucial thing is the speed at which they act, because it looks like they might have used AI not so much to get in in the first place, but to speed up this process of moving the money. Because there's a blockchain security company, Chain Analysis, who said that they shuffled money in and out of

16:22wallets at an amazing speed, which suggests automation. So Elliptic, which is another really interesting company which tracks these movements, says the hackers used about 12,000 wallets across 11 different of these blockchains and did 40,000 transactions to shuffle the funds to new wallets. Every 25 seconds, you're just moving the money constantly and circulating it, sometimes back and forth through the same address, basically to cause confusion. Because if you're trying to stop the money, you've got to work out, well, where is it at this moment? Who do I contact? What's the stolen money? And try and freeze it before it's moved through the system. And they were doing this so fast that that was really, really hard to do. So that's one of the high end things about this.

17:08Do we know yet what the actual sort of cyber weapon or the malware was that ended up on the computers at ByteDance? Or is that still being unpacked by Binance and other cybersecurity firms? Well, we don't know. I mean, they said it was kind of high-end zero-day malware. We don't know the exact type. But it was clearly, you know, this is stuff which is highly engineered and where the time spent putting this operation together is significant. This is not some hacker, you know, lone hacker using AI or something else could do. It's just not possible. The comparison that it drew my mind to was the Bangladesh central bank heist, which happened in 2016. And the fascinating thing about that was the way that the North

17:59Korean hackers got the money out of the bank and then started to move it, they had to go through, you know, correspondent bank accounts to try to move it eventually, I think, you know, to Singapore, where they could wash it through casinos. Here, you have a supercharged version of that, where instead of moving it four or five steps through a kind of correspondent banking system to try to outrun the freezing of those accounts, you have this just every four seconds back and forth move through a completely deregulated, decentralized system that is much more efficient for, I mean, essentially stealing and then laundering money. It's really amazing how 10 years later, the speed of this and the volume

18:46you can move is just so much bigger. I mean, that's right. Because that Bangladesh bank heist, they tried to steal a billion dollars. And I think they got away with about 81 million in the end. This time, they tried to steal 6.3 billion. And as I said, maybe about 3 billion or so gets frozen, but you still get at least, it looks like they got $3 billion at least out themselves, which then what's so interesting is offloading it. And I was talking to Jeff White, who's a journalist who did a series and wrote a book called The Lazarus Heist, and who spent time trying to trace actually what happens to some of this money. And he thinks immediately, quite quickly, you'll get the hackers selling off, say 3 billion for

19:302 billion. You sell it off at a discount to people who are then going to trade it into people who want to buy crypto, maybe particularly around Asia. Again, they'll buy the discount because it's kind of gray market, it's being washed. And eventually it will get laundered out, perhaps as we talked before, through different places and even kind of casinos as happened with Bangladesh. But this will have happened really fast and much faster. And actually the hackers will have offloaded and got their payout very quickly in this case. So it's a really kind of well-organized money laundering network that's been built up around these crypto heists. And I think the reality is, in this case, they got away with a lot.

20:08But who is making the money and who will benefit? Enter the North Koreans. So come back after the break and we will dive deep into the crazy world of North Korean hacking. This episode is brought to you by Petivity. Cat parents are basically mealtime detectives. Who actually ate? Did they finish? Was that less than yesterday? The new Petivity Smart Feeder for Cats turns everyday meals into meaningful health insights, helping you identify changes in your cat's habits and be more proactive about their health. Plus, you can feed them from anywhere. Take the mystery out of mealtime. Visit Petivity.com, P-E-T-I-V-I-T-Y.com slash cat feeder to learn more. Shaq here. What's it like to buy a car from Carvana 100% online and get it delivered to your door?

21:02Let me tell you. Your car is here, Mr. Shaq. Thank you, Mr. Carvana guy. Can't wait to take it for a spin. Only the best for you, Mr. Shaq. Hey, have you always been so big, tall, and handsome? Not always. I was 6'10 once. Seven days delivered or returned, Mr. Shaq? Not that I would. You never do. No, I never do. So buy your car today on Carvana. Delivery fees may apply. See our seven-day return policy at carvana.com. Starting a business can seem like a daunting task, unless you have a partner like Shopify. They have the tools you need to start and grow your business. From designing a website, to marketing, to selling, and beyond, Shopify can help with everything you need. There's a reason millions of companies like Mattel, Heinz, and Allbirds

21:39continue to trust and use them. With Shopify on your side, turn your big business idea into... Sign up for your $1 per month trial at shopify.com slash special offer. Well, welcome back. So, Gordon, how do we know that it's the North Koreans? Because obviously, they haven't claimed credit for this yet. No, in fact, they've denied it. But within a couple of days, the FBI pointed the finger, not just at the North Koreans, but a particular group who are called Trader Traitor, which is pretty good, I think, in cyber names. Don't you think? I mean, it's not bad. It's not bad. It's not. My personal favorite is the Beagle Boys, which were a hacking group. 90s pop band? Not a 90s pop band, but a hacking group we encountered who had been, I think, involved

22:31in some of the hacks prior to the Bangladesh central bank heist. So the Beagle Boys may have been subsumed by Trader Trader for all we know. Yeah, Trader Trader were good, I think. So the FBI immediately said it and seen them converting some of the stolen money into another cryptocurrency and was asking people to block addresses. Binance itself says that it's detected and prevented 57 suspected North Korea linked cyber threat cases, including other fraudulent job interviews, malicious software, all these kind of things. So Binance is 57 for 58 in preventing the North Koreans from getting inside. Oops. The one that goes wrong. The one that got away. That's right. Gossier billions. But I guess it was always going to be them.

23:14Because we talked, didn't we, before the break about the Bangladesh bank heist. And I mean, I find it really interesting because there they were going after central banks because Willie Sutton style, that's where the money was. But pretty soon after that, 2016 was that heist, they move into crypto because everyone's moving into crypto because that's where the money is. So it kind of makes sense that they move that way. And in recent years, we've seen lots of these hacks from Trader Trader specifically, 2025, they stole 1.5 billion from a cryptocurrency exchange Bybit which until now was the biggest and they tricked the CEO then into authorizing a seemingly routine transaction that handed them control of the exchanges system oops and there's other big hacks as well 308

24:00million dollars from a Japanese exchange in 2024 2335 million from an Indian one soon after. So, trade to trade to definitely have serious form in this. And they are thought to be linked, of course, not just to any old criminals, more anodyne spy agency name that really masks the insanity and piratical nature that is inbred in the reconnaissance general bureau. And I think it's worth setting up the North Korean context a bit because that is where these attacks come from. North Korea, it's kind of its own bird, isn't it, Gordon? Because it is a state that uses its spies, quote unquote, sort of scare quotes, to essentially act as criminals to go out and fund its military programs and its security services. And it all really does stem from being a relatively

25:09poor, although we should talk about how North Korea has changed a bit over the last few years, but a relatively poor cutoff kind of hermit kingdom run by a ruler, Kim Jong-un, who knows that he doesn't just need Dennis Rodman and basketball to survive, Gordon, he needs nuclear weapons and ballistic missiles. That's right. And we did do the Bangladesh Bank heist a couple of years back, didn't we, on the show. And it might be worth it if people are really interested in diving deep into Dennis Rodman specifically and the general bureau and who they are. Worth going back to those episodes. But it was also a very good report by this organization, DTEX, which says, at its core, North Korea's cyber program functions more like a state-sanctioned crime syndicate than a conventional military or intelligence apparatus. That's the key point, is their intelligence agencies friend of the pod of the show? Because they have quite the CV. I mean, if you go back, I mean, this is an agency or a bureau that has kidnapped Japanese citizens and rendered them to North Korea to serve as language instructors. They've blown up a Korean airliner, killing over 100 people. That was back in the 80s. They sunk a South Korean ship in 2010, killed almost 50 South Korean

26:26sailors. That was done by an RGB mini sub. My favorite, they assassinated Kim Jong-un's half-brother in the Kuala Lumpur airport with a nerve agent. This is insane. It's like, maybe we should do this story all on its own at some point. By convincing two women totally unaffiliated with the North Korean intelligence agencies that they were part of a prank. And they went up to him and smeared binary nerve agent on him that when it was combined, killed him as VX. And they also, lastly, the RGB has a department called the Enemy Collapse Sabotage Bureau. They are thought to be at least 8,000 state hackers working for North Korea. And it's really interesting, isn't it? Because they recruit young maths and IT students. And when I say young, I mean really young. I mean, they identify people

27:16at elementary or primary school level, and they put them in the pipeline for this program. And depending on how good you are, you can end up in almost like factory work doing the hacking, or the best get put into the elite hacking teams of the Bureau. The Beagle Boys. The Beagle Boys. And the incentives for them are quite strong, because if you get into that elite hacking team, you can lead a much better lifestyle, enough perhaps to be able to go spend time abroad in China or elsewhere in Asia where they sometimes operate. So the incentives are pretty strong to get into these hacking teams and to recruit the absolute best people. So the absolute best students will be taken and putting into these teams.

27:57And then the point is they make money for the state. I mean, they're a core part of the state apparatus. I mean, in all, TRM labs estimate that North Korean hackers have stolen $12.8 billion in cryptocurrency over more than 100 incidents in the last 10 years or so, and that they're responsible for 89% of all crypto hack losses in 2026. So they are basically the core of hacking all crypto around the world is coming from these North Korean state hackers. And if they have taken almost 13 billion over roughly the last decade, if that $3 billion from the Binance heist holds, they'll have gotten nearly a quarter of their haul over the last decade in about 20 minutes. It is absolutely remarkable. Now, this is the key point with North Korea is they're not just stealing this money for fun.

28:53The state, the North Korean state needs about $6 billion a year. So these kind of criminal operations are a very significant portion of its income. And it's income that the North Korean state hard currency, it could convert this into hard currency as sort of it moves down the line, that's hard for the North Korean government to get. And it's thought that roughly 50% of North Korea's currency funding for purchasing components, largely foreign for its ballistic missile programs, is now supplied by these cyber heists, which is wild. Can you imagine what it was like in the operations room of these hackers when they're watching the money come out? As someone said, it's like the end of Ocean's Eleven, where the fountains of the Bellagio

29:39in Las Vegas go up and they're all kind of standing there going, good job, guys, because you've just got a significant chunk of your state's income for the year to make nuclear weapons and missiles to fire them against the West. I mean, just in one heist. Except in this case, I think you might, instead of the Bellagio fountains, as you're seeing, you have a bunch of guys probably sitting in Cheeto-stained gamer chairs, working on energy drinks and Pop-Tarts, and screaming at screens. If you're looking to adapt this story, it's potentially a bit less cinematic than Ocean's Eleven. But the image that we have of hackers here, of a guy who's sitting in his mom's basement with computers and hardware everywhere. And it's like, that's not

30:26what we have here. This is an industrial operation. And so there's real structure and planning that goes into these. It's not five or six guys who are sitting in a room. This is a state level. This is like if you took the CIA or you took MI6 and you said said your job is now not to go out and collect a whole bunch of intelligence in the world, but to go out and actually commit crimes and to steal things all over the planet, that is what has happened here. The entire sort of industrial hacking capacity of the North Korean state is directed outward at these criminal enterprises. So these guys are probably sitting in a big office building somewhere and it probably has a bit of an operational flow to it. Although I think

31:08they probably are pop-tarts, don't you think so? Yeah, and they probably get a medal. But we should note, David, that North Korea has denied any role in this. A sister of North Korea's leader, Kim Jong-un, she responded to allegations and said they were a trite provocation. This is a sinister attempt to damage the international image of the DPRK, North Korea, and undermine its dignity and international prestige, she said. So there you go. That's that, man. You always do feel the urge, Gorda, don't you? I think it's the journalist in you to report, to faithfully report the denials from what I would describe as obviously guilty parties on our program. I'll let the State Collapse Bureau or Sabotage Bureau come after you then. The Enemy Collapse Sabotage Bureau.

31:56That's the one. Yeah. So I guess what does it all mean? I mean, where's your crypto, David? Is it safe? That's the big question. Well question well the question i do have and we haven't talked about this this piece of the the hack but i'm just thinking about it curious right now is how do they convert it to hard currency yeah i mean i think it's laundered through enough stages that eventually you can do that i mean whether they have to do it at casinos or because that's how they did it in bangladesh do you remember yeah they washed it through casinos so whether at some point you have to i mean you have to turn it into into currency somehow so um if anyone if anyone out there knows if anyone out there is a money launderer who you

32:35know works in crypto and washes it for the north koreans just the rest is classified at goldhanger.com drop us a line and explain because we'd be interested to know. I guess once you have moved it sufficiently so it is washed and you have it, you could in theory, I suppose, put it into another exchange and then cash it out. But it would be obviously in small chunks over time. But we should say that Binance initially stopped all its customer withdrawals, then restarted them. It says it's going to pay all the customer losses out of its own pockets from a special reserve fund. I mean, it's interesting because they're not a bank. They're not regulated in the way and protected. Your deposits aren't protected in the same way.

33:19But of course, they've got to do that because otherwise confidence, not just in their exchange, but in crypto generally kind of takes a knock. So individual customers have not lost their money. But the reality of this is there's going to be a lot more of these crypto heists because it's where the money is. So I think the answer is you've got to be careful. If you get asked, David, for a job interview, check your crypto wallet afterwards, I think. I guess the other reason why these are going to keep happening, and again, I'm comparing this to the Bangladesh central bank heist. If you remember, as the North Koreans were exfiltrating that money, there actually were people at various stages that

33:56had to be recruited by the North Koreans, physical people who worked at banks and who worked in logistics, who had to operate as kind of a network for the North Koreans, most of them probably unwitting ultimately of where it was going. But there was legwork, operational legwork required to move that money out. In this case, it's very similar to the way that we now see Russian intelligence operating in Europe, where you have these, you know, almost digital networks that in many cases are easier to establish because you don't have people on the ground, right? You don't have that kind of investment that's required. So in this case, I mean, again, we're seeing 10 years on from Bangladesh, exfiltrating all this money doesn't

34:39even require humans outside of North Korea or, you know, wherever the operational teams were when they conducted the heist. Yeah, that's right. And I think on a more serious note, I mean, it is worth reminding people that North Korea is supporting Russia's war in Ukraine. I mean, it's sending not just artillery shells, but also it sent thousands of North Korean soldiers to fight the Ukrainians. So these kind of crypto heists are actually supporting that kind of activity, not just the missile test. And I think there was actually a missile test just today on the Wednesday we're recording, which North Korea did in its region. But it's also carrying out pretty dark activity in Europe as well, supporting Russia. But the one interesting thing when I was

35:21looking into this was that the North Korean economy is actually doing pretty well. I mean, we think about it as this kind of hermit kingdom, which is struggling. But it grew last year by 3.5% its economy. And there was a Wall Street Journal piece from the summer saying, you know, restaurants there are serving up brick oven pizza and chicken wings. And you can pay through a mobile QR code system. And there's, you know, Chinese electric vehicles on the street. So I think our image of North Korea maybe has to change a little bit based on partly its heists, but also the fact it's actually more integrated, I think, in getting more support from China maybe than it did in the past. So it's one to watch, I think. This is not a state that's in the middle of a

36:03famine like it was in the mid-90s, I think so much of our mental pictures of it. This is not a state that's in the middle of a famine like it was in the mid-90s. I think so much of our mental pictures of it. This is a state that just conducted the largest heist in the history of the world. That is what we just discussed, is this state pulled that off. And you have to have a very sophisticated cyber capability and all of the human capital underneath that to pull it off. That's right. So just a reminder, keep your crypto wallet close to you and be careful about those job interviews. Keep it close. Hold your loved ones and your crypto wallets. Hold them tight. Thanks for listening. Next episode of the CIA and Watergate, that fantastic series, is out next week.

36:42Club members, of course, will get a deep dive into the crazy character at the center of that story, Howard Hunt, as well as getting a chance to hear none other than Anthony Scaramucci give us his views on Watergate. So do join if you're not already a member. It's therestisclassified.com. Gordon, you've forgotten the newsletter. Listeners need to sign up for the newsletter. You can do that at therestisclassified.com forward the newsletter. Listeners need to sign up for the newsletter. You can do that at therestisclassified.com forward slash newsletter. And as a extra bonus for all of you people who sign up for the newsletter, I am writing a piece next week on the agency's publication review board process,

37:19which as I say it out loud, doesn't sound as enticing as the piece almost certainly will be. So join the newsletter to get that. Prize Picks packs are here. Rip digital packs and get real basketball, football, and Pokemon cards on Prize Picks packs. Available now nationwide. Once you see your pool, you have a choice to sell back instantly for real cash or ship it home. Cash from your sale will immediately be added to your PrizePix balance. It's just another way to run your game. New users, download the PrizePix app today and use code SPOTIFY to get $25 instantly in bonus packs when you buy your first $5 pack. PrizePix. Run your game. 18 plus eligible areas. Terms apply. Collect responsibly.

38:06Starting a business can seem like a daunting task. Unless you have a partner like Shopify. They have the tools you need to start and grow your business. From designing a website to marketing to selling and beyond, Shopify can help with everything you need. There's a reason millions of companies like Mattel, Heinz, and Allbirds continue to trust and use them. With Shopify on your side, turn your big business idea into... Sign up for your $1 per month trial at shopify.com slash special offer. This holiday, all plans, even unlimited, are just $15 a month. A holiday deal this good obviously deserves an enormously expensive holiday song like All I Want. Right. Okay, we can't afford that. You know what? Forget the music budget.

38:47We're going to stick with whatever's in the public domain. Give it a try at mintmobile.com slash switch. Upfront payment of $45 for three months, $90 for six months, or $180 for a 12-month plan required. $15 per month equivalent. Taxes and fees extra. New customer offer for initial plan term only. Greater than 50 gigabytes may slow when network is busy. See terms.