Wallets that siphoned Atomic users’ funds are connected to the known Lazarus group’s addresses, crypto tracing firm said.