According to BlockBeats, on December 14, Scope Protocol co-founder 0xSentry posted on social media that the digital traces left by the attacker involved the Gmail account of @JunichiSugiura (Jun, a former Ledger employee), and the latter's account may have been leaked. A developer said that one possible scenario is that Jun's GitHub account has been leaked and Ledger forgot to delete his access after he left.