ChainCatcher reported that ZachXBT said on the X platform that ZachXBT found out that a team hired several North Korean IT personnel using fake identities as developers when it was helping them track down the theft of $1.3 million from its treasury. These North Korean developers stole $1.3 million and laundered the money through a series of transactions.

Later, during the analysis of the transactions, it was further discovered that these North Korean developers who used fake identities were organized. It can be inferred that a "single entity in Asia" employed at least 21 North Korean IT personnel, who used fake identities to participate in the development of more than 25 crypto projects and earned $300,000 to $500,000 per month. Some of the transactions were also related to Sim Hyon Sop. Sim Hyon Sop was sanctioned by the Office of Foreign Assets Control (OFAC) for allegedly coordinating financial transfers.