Elliptic has identified the $285 million Drift Protocol exploit as a likely North Korea-linked operation. The research firm highlighted multiple indicators of North Korea's involvement in the attack, including onchain behavior, laundering methodologies and network-level signals. If confirmed, this incident would represent the eighteenth act the firm has tracked this year, with over $300 million stolen so far. The U.S. Treasury Department has stated that North Korea uses the stolen assets to fund its weapons of mass destruction program. The case highlights the need for holistic cross-chain tracing capabilities, highlighting the complexity of Solana's account model and potential challenges in identifying the culprits.