Odaily星球日報訊慢霧在分析過程中發現CoinEx黑客或為朝鮮黑客團伙Lazarus Group,具體關聯如下: 1. 已知的Alphapo Exploiter(TDrs…WVjr)通過TransitSwap將TRX兌換為ETH並跨鏈到地址(0x22be3b0a943b1bc0ea3aec2cb3ef511f3920a98d),故該地址在ETH鏈上也被標記為Alphapo Exploiter; 2. 黑客地址0x22be3b0a943b1bc0ea3aec2cb3ef511f3920a98d在ETH鏈上被標記為Alphapo Exploiter,在BSC鏈上被標記為Stake.com Exploiter,即該地址為共用地址; 3. 0x75497999432B8701330fB68058bd21918C02Ac59在ARB和OP鏈上被標記為CoinEx Exploiter,在Polygon鏈上被標記為Stake.com Exploiter,即該地址為共用地址。因Stake.com Exploiter已被FBI關聯於朝鮮黑客團伙Lazarus Group,所以Alphapo Exploiter、Stake.com Exploiter和CoinEx Exploiter或都為朝鮮黑客團伙Lazarus Group。