$62B Bitcoin ETF Is Already on North Korea's Shortlist, Founder Warns

North Korea May Already Be Targeting BlackRock's $62B Bitcoin ETF

The same hacking operation that US authorities say looted $6 billion from Binance may now have BlackRock's IBIT squarely in its sights.

That's the warning from Yishi Wang, founder of crypto hardware wallet maker OneKey, who said publicly what many in the industry are whispering privately: 'I suspect IBIT is already on North Korea's shortlist.'

This isn't paranoia. It's pattern recognition.

The Precedent That Makes This Credible

US authorities attributed the Binance breach to North Korea's TraderTraitor operation, a state-sponsored hacking unit that has systematically targeted the largest pools of crypto liquidity on earth. The group doesn't chase small targets. It hunts institutional-scale honeypots.

BlackRock's iShares Bitcoin Trust now holds roughly $62 billion in Bitcoin. It is, by a significant margin, the single largest concentrated pool of Bitcoin exposure in the world. If TraderTraitor uses a size filter, IBIT prints at the top of the list.

Coinbase Is the Pressure Point Nobody Is Talking About

Here's the angle that gets overlooked in the headline risk: Coinbase serves as the custodian for IBIT. That means any successful attack vector doesn't need to hit BlackRock directly. It needs to compromise Coinbase's custody infrastructure.

Coinbase also custodies assets for a significant portion of the newly approved spot Bitcoin ETF market. A breach at the custodian level wouldn't just affect one fund. The contagion potential is systemic.

This is the hidden risk that institutional allocators marketing these products to pension funds and wealth managers are not loudly disclosing in their pitch decks.

What History Says About State-Level Crypto Attacks

North Korea's crypto hacking program has reportedly generated billions in revenue used to fund its weapons program. The Lazarus Group and TraderTraitor don't operate like opportunistic thieves. They conduct months-long reconnaissance, exploit human vulnerabilities, and execute with military precision.

The $625 million Ronin Network hack. The $100 million Horizon Bridge attack. The $6 billion Binance operation. Each one was larger than the last. The escalation is not random.

What Crypto Holders Should Watch

If you hold IBIT or any spot Bitcoin ETF, the risk is not that your shares disappear. ETF structures have legal protections. The real risk is a custody event triggering a forced liquidation or temporary halt, creating a violent price dislocation that affects the entire market.

Watch Coinbase's security disclosures. Watch any unusual Bitcoin wallet movement tied to known DPRK addresses flagged by on-chain analysts. And watch whether BlackRock or other ETF issuers quietly begin diversifying custodians.

That last move, if it happens, will tell you everything.