In his research, he found: ⟜ Test transactions before the exploit ⟜ Wallet connections to past Lazarus hacks ⟜ Transaction timing matching Lazarus’ previous attacks Bybit and law enforcement are now tracking the stolen funds.