[Chainalysis: Nation-State Hackers Account for Half of Malicious Code Written to Public Blockchains] According to a report by Unchained on September 21, Chainalysis released findings indicating that malicious code written to public blockchains has increased more than fivefold within a year, with nation-state attackers accounting for 51% by Q2 2026. Since the mid-2025 release of China's open-source AI model with weighted capabilities, on-chain writes containing malicious instructions have risen from a daily average of 2.06 to 11.1, spanning five blockchains and identifying over 15 attack groups. This technique is referred to as the "blockchain dead drop": command server addresses are embedded in smart contracts or transactions, allowing infected machines to query the chain to retrieve connection targets. Blocking domain names proves largely ineffective, as a single transaction can simultaneously redirect all compromised machines, and the instructions are nearly impossible to intercept. The report specifically names North Korea's UNC5342 group, which has deployed attacks across TRON, Aptos, and BNB Chain, using fake job interviews to target MetaMask and Phantom wallets. Additionally, individuals suspected of being linked to Iran's Ministry of Intelligence have been embedding instructions into Bitcoin transactions.