Foresight News reports that Drift has released the latest investigation into the attack incident, which indicates that this operation was carried out by the same threat actor responsible for the Radiant Capital hacking incident in October 2024, with highly consistent on-chain fund flows and operational methods. Mandiant attributes the Radiant Capital hacking incident to UNC4736, an organization associated with the North Korean government. Additionally, this attack was the result of a meticulously planned operation lasting 6 months. Starting in the fall of 2025, a group impersonating a 'quantitative trading firm' actively contacted Drift contributors at multiple international cryptocurrency conferences.