She worked with the Axie game developer, Sky Mavis, to unravel the flow of stolen funds after the hack.

So there's this big pot of money within the bridge of all these locked assets from all these people who are moving one direction or the other.

Once DPRK transferred ownership to themselves, now they could move all these tokens however they wanted so that they could basically drain all of those funds to themselves.

Most incredibly, no one even realized this had happened for six days.

It ended up being a community member who pointed to the team and said, "I think something weird happened here, and you should take a look." Because blockchain transactions are all publicly on the ledger, you could see any outflows from the bridge.

If you wanted to look, any person could.

And so seeing $600 million leave at once, well, that's very suspicious.