The South Korean National Intelligence Service stated that it is cooperating with others to investigate the reasons for and responsible parties for the theft of Orbit Bridge. Under Article 48, Paragraph 3 of the South Korean Information and Communications Network Act (Report on Infringement Accidents, etc.), information and communication service providers must immediately report infringement incidents to the Ministry of Science and ICT or the Korea Internet and Security Agency. Therefore, in the early stages of the theft of Orbit Bridge cryptocurrency, the Korea Internet Security Agency and the National Police Agency were invited to analyze the cause of the incident. However, the South Korean National Intelligence Service was also invited because analysis suggests that the Lazarus North Korean hacker group is likely the culprit behind this attack.