Blockchain analysts TRM Labs and Chainalysis say the attackers behind the raid were from North Korea.