According to CoinMeta, Wu said that Chainalysis released an update on the investigation into the $387 million security incident, stating that the attack was attributed to North Korean-related threat actors. Within three hours of the attack, the stolen funds were transferred through 23 transactions to Ethereum, XRP, Zcash, and Tron, accounting for 49.7%, 40.8%, 7.6%, and 1.8% respectively. Chainalysis mentioned that the investigation team utilized internal AI to build an automated cross-chain tracking tool, which reduced the manual reconciliation work, which would normally take over 20 hours, to just 10 minutes, and continued to track the stolen funds as well as the associated addresses. The company stated that this incident resulted in North Korean-related crypto thefts exceeding $1 billion in 2026.