A security probe has linked $4.06 million in stolen TRON assets to DarkSword and Coruna exploits targeting outdated iOS versions rather than wallet application flaws.