The initial address of the hacker was funded by Tornado Cash, leading to suggestions the exploit may be the work of DPRK hackers. The hacker used MetaMask for transfers and bridging to other chains in order to target KiloEX, which operates on BNB Smart Chain and Manta Network.