CBC News reported that at least one RCMP officer had previously taken note of one of Wortman's replica vehicles, and advised him not to drive it on the road. Officials later said Wortman had acquired the specific vehicle he used in the attacks at an auction in fall 2019. The RCMP determined the decals used for the replica vehicle came from a supplier, but that they were made without the business owner's permission. The RCMP also looked into the navigation logs of Wortman's vehicles to determine if the route he took during the attacks was predetermined. Leather also said that Wortman had no possession and acquisition licence and his weapons were illegally purchased, a matter that is being investigated further. Superintendent Darren Campbell said five firearms were recovered from the stolen vehicle Wortman was driving in Enfield. Four of them belonged to Wortman: two semiautomatic handguns and two semiautomatic rifles, one of which was described as a "military-style assault rifle". The fifth was Stevenson's stolen service pistol, a 9mm Smith & Wesson. Police also said that while one of Wortman's firearms had originated in Canada, via the estate of a former associate, all of the others likely came from the United States. The man from whom Wortman had previously considered buying a police car said that he was warned by police during the incident that he was considered a possible target. However, Wortman ultimately never attacked him during the rampage. The Nova Scotia RCMP Major Crime Unit launched a tip hotline to gather further information about the attacks. On May 11, the RCMP's Behavioral Analysis Unit launched a "psychological autopsy" on Wortman, which involved extensive interrogations with his friends, family members, and colleagues. It found that he was an "injustice collector", a criminology term for those who keep track of perceived slights and petty grievances that occur over many years. In the weeks before the attacks, Wortman liquidated his bank accounts and withdrew a large sum of money in cash. News magazine "Maclean's" ran stories that alleged the money withdrawal and other evidence pointed to Wortman having ties to organised crime and being a confidential informant for the RCMP. In response to the allegations, the RCMP denied having any prior association with Wortman, saying his recent behavior and stockpiling activities were driven by paranoia about the COVID-19 pandemic possibly growing out of control and leading to a widespread institutional and infrastructural collapse. They also said they found a fireproof safe containing hundreds of thousands of dollars at his Portapique property.