They may not have been involved in the operations of how to run the software/make the trades/interface, who knows they could just be a physical security person that realized there was an opportunity in the chaos.

I haven't seen any public information that tells us who it might be, this is all guess work, but it really doesn't look like a professional operation like Lazarus Group