Crypto E-Commerce Platform Bitrefill’s Funds Drained In North Korean Cyberattack

Bitrefill, a Sweden-based crypto e-commerce platform, suffered a critical Remote Code Execution (RCE) attack on March 1, 2026, leading to the theft of funds. The incident was attributed to North Korean hackers linked to the Lazarus group, exploiting a previously undisclosed vulnerability in Bitrefill's infrastructure. Financial losses and reputational damage are expected for the platform and its users.

Bitrefill, a Sweden-based crypto e-commerce platform, revealed on Tuesday that it fell victim to a cyberattack on March 1, 2026, carried out by suspected North Korean hackers linked to the notorious Lazarus group. The company released a post-mortem report de…