Chainalysis report: National level hackers account for 51% of malicious code writes on public chains

According to the Chainalysis report, the amount of malicious code written into public chains has increased more than fivefold within a year, with national level attackers accounting for 51% in the second quarter of 2026. Since the release of the open-source weighted Chinese AI model in mid-2025, the number of on chain writes carrying malicious instructions has increased from an average of 2.06 per day to 11.1 per day, covering five blockchains and identifying more than 15 attack groups. This technology is known as "blockchain dead drop", where North Korean UNC5342 deploys malicious instructions on TRON, Aptos, and BNB Chain, and Iranian intelligence affiliates write the instructions into Bitcoin transactions. (Source: Unchained)