South Korean investigators confirmed that the cyberattack on the Upbit cryptocurrency exchange in 2019, which resulted in the theft of $50 million in ETH, was organized by North Korean hacker groups Lazarus and Andariel. During the investigation, conducted in conjunction with the FBI, North Korean IP addresses and schemes for the movement of virtual assets were identified. 57% of the stolen ether was converted to bitcoin through exchanges controlled by North Korea.