North Korean hackers have appeared in CryptoQuant: analytics or intelligence?
The analytical platform CryptoQuant recorded an unusual visit: a user with an IP address from North Korea accessed the Bitcoin MVRV Ratio metric. Although a single incident is not proof in itself, the context of North Korea's internet isolation turns it into a significant signal for the entire crypto community.
Visit Details: What the Amplitude System Showed
According to a screenshot from the Amplitude analytics system, the visit had the following parameters: target page — "Bitcoin: MVRV Ratio," referral — from google.com, operating system — Mac OS X, country — North Korea. The post's author suggested that this visit was not by ordinary citizens, but by individuals close to the country's top leadership. Access to the global internet in the DPRK is a privilege available only to a select few: state, diplomatic, and military structures. Therefore, any internet access from a North Korean IP address highly likely indicates a state agent.
Why Interest in MVRV Ratio Is Not a Coincidence
The MVRV Ratio (Market Value to Realized Value) metric compares an asset's market capitalization with its realized capitalization and is used to assess whether Bitcoin is overvalued or undervalued relative to the average coin acquisition price. Why a North Korean would need this indicator is an open question. However, in the context of regular reports from blockchain analysts about the activities of the Lazarus Group and other hacker groups affiliated with Pyongyang, this interest takes on a strategic tone.
Cyber operations provide the closed and sanctioned country with funds that are difficult to obtain through legal means. Digital assets have become an important economic resource for Pyongyang. That is why close attention to market metrics from North Korean IP addresses is not just curiosity, but most likely an element of intelligence or planning for another operation.
My Professional Opinion
This incident is a stark reminder that the crypto market is in the crosshairs not only of retail traders but also of state cyber structures. Interest in the MVRV Ratio may indicate an attempt to assess the current phase of the cycle to choose the optimal moment for liquidating accumulated assets or, conversely, for building up positions. In any case, behind each such visit is not just an analyst, but an entire ecosystem where cryptocurrency is a tool for survival and financing.