Renowned blockchain tracking blogger ZachXBT speculates that the attack on Binance, which stole $5.875 billion, was carried out by Lazarus Group, a subsidiary of the Reconnaissance General Bureau of the General Staff of the Korean People's Army. The group's previous thefts in this area include: Japan's DMM exchange, approximately $300 million; India's WazirX exchange, approximately $230 million; the Chinese-owned Bybit exchange, approximately $1.5 billion; the on-chain protocol Kelp DAO, approximately $292 million; and the Chinese-owned Bitget exchange, approximately $380 million. Although Binance has recovered half of the assets, recovering Bitcoin and Ethereum remains a challenge. The hacker's ultimate goal was to channel the assets into North Korea to fund its national development.