North Korean hackers likely stripped two cryptocurrency payment services of nearly $100 million in an attack earlier this month, according to blockchain investigators, as the regime seeks to secure funds for its nuclear weapons program.

The DPRK-linked Lazarus Group appears to have stolen the funds from Estonia-based CoinsPaid and Alphapo, the investigators have found.

CoinsPaid said in a statement that it lost $37.3 million on July 22 as a result of an attack likely perpetrated by the Lazarus Group, noting that the company’s revenue was affected while customer funds remained intact.

Anonymous blockchain sleuth ZachXBT