Our analysis reveals that the #NorthKorean #Lazarus group is behind the attack, based on #blockchain analysis behavioral patterns of the stolen funds. On March 21, 2025,@ZOTH protocol’s wallet was compromised and the attacker withdrew over $8.5 million in #crypto assets. Lazarus used once again the @THORChain protocol to swap the stolen #ETH to #Bitcoin and #Litecoin, then the stolen funds from the @ZOTH incident were mixed together with Bitcoin #wallets from the @Bybit hack and the @Loopring💙 hack from one year ago. Lazarus cashed out the stolen funds from the incidents in @Binance ,@Cash App ,@HTX and many other digital currency platforms with weak KYC/AML procedures.