An address linked to the Balancer attack has transferred 5,609 ETH, valued at $13 million, to THORChain, according to on-chain analysts. The Balancer incident in November 2025 resulted in over $116 million being stolen. The suspect is also believed to be behind the Aave attack, with both incidents attributed to the North Korean hacking group Lazarus Group. The group has been using Tornado Cash for laundering activities.