Analysts at Elliptic later linked the attack to North Korea's Lazarus Group, a state-sponsored hacking collective notorious for siphoning billions of dollars from the cryptocurrency industry. The group is known for exploiting security vulnerabilities to finance North Korea's regime, often using sophisticated laundering methods to obscure the flow of funds.
"We've labelled the thief's addresses in our software, to help to prevent these funds from being cashed-out through any other exchanges," said Tom Robinson, chief scientist at Elliptic, in an email.