I mapped a cell of 14+ accounts that infiltrated Tokamak Network
Contents
Continuing on the previous DPRK IT worker investigation. I mapped a cell of 14+ accounts that infiltrated @Tokamak Network including 508 commits to their bridge frontend and a separate operator who built infrastructure to monitor pending transactions before being removed.
🧵2/14
The primary actor is "jusdy" (GitHub ID: 89120956), who committed 508 times across 5 Tokamak repos between November 2023 and December 2024:
- tokamak-bridge-frontend - 151 commits (deposit/withdrawal logic, approval flows, gas fee estimation, token handling, swap functionality)
- gem-marketplace - 243 commits (NFT mining, contract integration, transaction handling)
- gem-nft-subgraph - 34 commits (GraphQL subgraph indexing on-chain events)
- bridge-landing-page - 65 commits
- L2-landing-page - 15 commits
Commit email: [email protected]. Previous username: dylandev125 (deleted).
🧵3/14
A second operator, "black02430horse," worked alongside jusdy on the bridge frontend from August 2024 to February 2025. Their GitHub account has since been deleted, but commits remain in the git history under [email protected].
They committed to 7 repos including:
- tokamak-bridge-frontend - token balance …
🧵2/14
The primary actor is "jusdy" (GitHub ID: 89120956), who committed 508 times across 5 Tokamak repos between November 2023 and December 2024:
- tokamak-bridge-frontend - 151 commits (deposit/withdrawal logic, approval flows, gas fee estimation, token handling, swap functionality)
- gem-marketplace - 243 commits (NFT mining, contract integration, transaction handling)
- gem-nft-subgraph - 34 commits (GraphQL subgraph indexing on-chain events)
- bridge-landing-page - 65 commits
- L2-landing-page - 15 commits
Commit email: [email protected]. Previous username: dylandev125 (deleted).
🧵3/14
A second operator, "black02430horse," worked alongside jusdy on the bridge frontend from August 2024 to February 2025. Their GitHub account has since been deleted, but commits remain in the git history under [email protected].
They committed to 7 repos including:
- tokamak-bridge-frontend - token balance …