Drift: Hackers suspected to be a North Korean group, infiltrated after six months of disguise and contact Drift has released the latest investigation into the attack, pointing out that this operation was carried out by the same threat actor responsible for the October 2024 Radiant Capital hack. The on-chain fund flows and operational methods are highly consistent. Mandiant attributes the Radiant Capital hack to UNC4736, an organization linked to the North Korean government. The investigation is still ongoing, and these findings are only preliminary. All remaining protocol functions have been frozen, and the compromised wallet has been removed from the multisig. The attacker’s wallet has been flagged by exchanges and cross-chain bridge operators.