While Chainalysis suspected the involvement of North Korea in the Euler Finance hack, they highlighted the possibility of misdirection by other hackers.
Source: Cointelegraph.com
Original Post: Euler Finance hacker sends 100 ETH to red-flagged North Korean address