PANews reported on February 25 that SlowMist founder Yu Xian posted on the X platform that the 12,000 ETH stolen from Shenyu last year due to a phishing attack was done by the Eastern European hacker group Inferno Drainer, not North Korean hackers. The money laundering model is somewhat similar to that of North Korean hackers, and the funds are difficult to recover.