According to Cointelegraph, TRM Labs stated with high confidence that the attack was linked to North Korea, while ZachXBT found that funds stolen from Binance and Bitget were aggregated at the same address.