Hersch has not implicated the CIA, but the USN.
Secret squirrel stuff needs to be disclosed to a Congressional (or Senate?) committee, but Naval operations don’t, was Hersch’s point.
But if it was a third party Ukrainian-led or Ukrainian-identified group, they could have been funded in any number of ways, possibly through a Euro country.
The CIA is presumably doing the deflecting now for the US.