CertiK describes the November 2023 Poloniex compromise as a private-key incident affecting Ethereum, Tron, and Bitcoin wallets, with losses estimated at about $132 million. The stolen assets moved through at least 681 wallets, including large ERC-20 swaps into ETH and separate activity on Tron and BTC. The attacker mistakenly sent more than 10.5 million GLM tokens to the Golem token contract instead of a controlled wallet. CertiK frames the case as part of a 2023 pattern in which private-key compromises drove most Web3 losses; the excerpt does not make a DPRK or Lazarus attribution.