Since no one mentioned it - this seems to be a major and real problem in the crypto job space. In their job market it's more believable that a 'stealth startup' is reaching out and doing a code challenge from an unfamiliar email or repo, and crypto devs are likely to have a wallet or passwords accessible on their system. They are willing to go above and beyond the regular spam or AI conversations to get access.
cheap laptops are cheap, simply don't use your "real" computer.
Also, to be into cryptocurrency, you kind of have to be gullible to begin with.
Yes, I got targeted too: https://blog.denv.it/posts/i-was-likely-targeted-by-dprk-in-...
(Don't work in crypto, but there's a crypto company with the same name as the one I work at)