The FBI referred to the attack as “TraderTraitor,” a malicious campaign linked to North Korean state-sponsored hackers the Lazarus Group.

The FBI has officially linked the $1.4 billion cryptocurrency heist at Bybit to North Korean state-sponsored hackers after security researchers reached the same conclusion. The agency alleges that the infamous North Korean hacking group Lazarus is behind the hack.

The Lazarus Group, a cybercrime syndicate linked to North Korea, has long been a thorn in the side of the crypto industry. Since 2017, the group has stolen over $6 billion in digital assets, funneling the proceeds into the country’s ballistic missile program. The Bybit heist alone accounts for nearly a quarter of that total.