Abstract: Attribution of cyberattacks requires identifying those responsible for bad acts, prominently including states. To guard against baseless or false attributions, this Article argues that states should establish an international law requirement that public attributions of state-sponsored cyberattacks must include sufficient evidence to enable cross-checking or corroboration of the accusations.