In May 2024, Japan’s DMM Bitcoin lost 4,502.9 BTC, worth about $308 million, in a theft attributed by the FBI, DC3, and Japan’s National Police Agency to North Korea-linked TraderTraitor activity. The actors socially engineered a Ginco employee with a malicious GitHub-hosted Python script, used stolen session-cookie data to impersonate the employee, and manipulated a legitimate DMM transaction request to move funds to attacker-controlled wallets.