OFAC designated ten individuals and the First Financial and Technical Development Center for allegedly supporting overseas IT-worker networks that generated revenue for the North Korean government. SlowMist analyzed eight sanctioned Ethereum and TRON addresses and identified overlapping ownership records, direct transfers, and common Bybit and HTX deposit destinations connecting Boykov, Obertas, and Kim Ki Hyok. The networks allegedly use false identities, location-masking infrastructure, local facilitators, and cryptocurrency transfers to obtain foreign employment and remit earnings to the DPRK. The article recommends coordinated identity, device, access-control, sanctions-screening, and transaction-monitoring measures.