ChainCatcher message, on-chain analyst ZachXBT stated that the approximately $1.2 million in stolen funds from THORChain may have originated from user @jpthor, whose private wallet was compromised a few days ago due to a fake conference scam. ZachXBT added that @jpthor was one of the individuals who profited from a North Korean hacker attack and money laundering.