According to Odaily, SlowMist's Cosine shared on the X platform that while there is no concrete evidence yet, the techniques used in Safe multisig operations and current coin laundering methods resemble those employed by North Korean hackers.