Denuvo is based on VMProtect, at least in part, which implements DRM through virtualization and encryption of the original code. Since it takes days to "crack Denuvo", I'm guessing they are cracking the encryption key or doing some sort of statistical reassembly of the raw code from a sample base. In either case it doesn't sound like there are any insiders involved, no.

https://vmpsoft.com/

The back story is that at some point VMPSoft was suing Denovo for buying a single license of VMProtect and then using it to roll out their own DRM system. It was a complete LOL really. They ended up settling out of court.