On-chain detective ZachXBT stated that stolen funds from the $6.3 billion Binance exploit and the $388 million Bitget exploit were funneled through THORChain to the same address, suggesting that both attacks might have been carried out by the same perpetrator. Previously, the Bitget attack was attributed to the North Korean-linked group TraderTraitor. MistTrack's tracking shows that TRX stolen in the Binance incident flowed through the Bitget Wallet Swap Bridge into an address previously used by the Phemex hacker.