Golden Finance reported that Slow Fog founder Cosine posted on X platform: "In-depth analysis and investigation in the past 30 days, through forensic analysis and correlation tracking, we confirmed that the attacker was the North Korean Lazarus Group, a targeting cryptocurrency exchange. We have decided to share relevant IOCs (Indicators of Compromise) for national APT attacks, including some cloud service providers, agents and other IPs, for emergency investigation by various exchanges and relevant platforms. We need to pay attention to the disclosure of this article. I didn’t say which platform or platform it was, nor did I say it was Bybit. If there were similarities, it was really not impossible.”