Rekt attributes the CoinDCX incident to attackers who allegedly prepared the theft over several days, funding activity with 1 ETH from Tornado Cash before routing through FixedFloat, Polygon, deBridge and Solana. The article describes a July 18 drain of about $44.3 million from CoinDCX-linked wallets, including large SOL and ETH losses, followed by fund splitting, cross-chain bridging and consolidation into identified Solana and Ethereum addresses. ZachXBT publicly flagged the likely CoinDCX drain before the exchange disclosed it, and the source criticizes the delay between the first suspicious withdrawals and official confirmation. The source says the preparation, cross-chain laundering and precision of the theft could hint at Lazarus Group according to some sources, but it does not present confirmed attribution.