According to ZachXBT monitoring, the North Korean hacking group Lazarus Group operated the stolen funds of the two hacking incidents of Bybit and Phemex through the same address (0x33d057af74779925c4b2e720a820387cb89f8f65), confirming the connection between the two incidents.