According to on-chain analysts, an address associated with the Balancer attacker has transferred 5,609 ETH, valued at $13 million, to THORChain. In November 2025, Balancer was hacked for over $116 million, with the same suspects linked to the Aave attack, both pointing to the North Korean hacker group Lazarus Group, which has recently been frequently using Tornado Cash for money laundering.