DWF Labs is suspected to have been hacked by North Korea-linked threat group AppleJeus in 2022, losing at least $44 million

Independent researcher tanuki42 said that market maker DWF Labs was suspected of being hacked by North Korea-related threat group AppleJeus in September 2022, losing at least $44 million, mainly USDC/USDT; the relevant address funds were cross-linked to Bitcoin and long-term silence, and recently some of them flowed into the custody mixed coin service Mixero.
The post also listed multiple connected transactions with unused BTC addresses; as of November 2025, DWF Labs had not publicly confirmed the incident.