Each federation member is compliant in their own jurisdiction. So some of the exchanges in the US, Blockstream prolly in EU/Malta. boltz was/is in El Salvador.

What makes you think feds are not the attacker?

1. They'd not do an op return
2. They'd never give anything back
3. They wouldn't fuck up like this