According to Lookonchain, the funds used to open $JELLY positions and execute an attack on Hyperliquid were sourced from withdrawals made at OKX and Binance. This strategic movement of funds highlights the importance of tracking transaction origins for assessing market manipulations, which can significantly impact trading strategies.