ALEX Lab, a Bitcoin DeFi application, has attributed its recent security breach to the Lazarus Group, a notorious hacking collective linked to North Korea. Last month, the project experienced a significant exploit where attackers accessed the private key controlling its XLink bridge, resulting in the loss of over $4 million worth of tokens.

In a statement on June 15, ALEX Lab identified three crypto wallet addresses crucial in tracking the culprits, which interacted with a Lazarus-related address, ultimately sending funds to a Tron address associated with the group.

This forensic analysis pointed to the involvement of the Lazarus Group, known for its cyber operations often attributed to the North Korean government. Over recent years, Lazarus Group has targeted the crypto industry, reportedly stealing more than $3 billion, according to a Chainalysis report.

Despite efforts with Singapore Police Force and cybersecurity experts to recover assets, ALEX Lab disclosed that most stolen STX tokens remain frozen on centralized exchanges (CEXs), pending ongoing investigations.

Nonetheless, the project has resumed key operations, including token migrations and reopening unaffected liquidity providers.