Bondly Finance suffered an infinite-mint exploit that generated 373 million new BONDLY tokens and produced about $5.9 million in attacker profit. The attacker minted and dumped 100,000 tokens at a time, causing the BONDLY price to fall by about 80%. The excerpt lists a mint address, an associated wallet, and notes that $4.8 million in DAI was sent to Tornado Cash while $1.1 million in DAI and BONDLY remained on the address at the time of writing. Bondly’s own announcement attributed the incident to an unknown compromised wallet, while the article questions whether it was an external attacker or insider activity without resolving attribution. No North Korea-linked actor or DPRK campaign is supported in the excerpt.