ZachXBT: $1.2 million stolen address may belong to John-Paul, founder of THORChain

According to BlockBeats, on September 12, on-chain detective ZachXBT commented on the incident of "a THORChain user stolen $1.2 million" that the address may belong to THORChain founder John-Paul Thorbjornsen (JP, @jpthor) who was stolen a few days ago due to a false conference scam. "JP is one of the most profitable members of the North Korean hacker attack/vulnerability exploitation funds. Therefore, he suffered losses due to the backlash from North Korea's relevant means, which is quite a bit of causal reincarnation." BlockBeats Note: JP's "relationship" with North Korean hackers (mainly Lazarus Group) is not a direct cooperation or personal connection, but arising from the THORChain agreement's position in the 2025 Bybit trading platform hacking incident. North Korean hackers stole about $1.4 billion worth of cryptocurrency from Bybit in February 2025, one of the largest crypto thefts in history. The hackers then used THORChain as a primary tool to clean up the stolen money, bridging 85% of the stolen funds (about $1.2 billion) to convert them into other assets to evade tracking.