Details of the Theft and Asset Movement
According to ZachXBT, the funds were withdrawn as USDC and USDT stablecoins on Sunday, November 1. The actor, described as an "illicit actor," moved the funds aggressively to cover their tracks within 24 hours. The movement of assets included several specific steps:
- The actor swapped USDC for ETH.
- Funds were sent through instant exchange services, including WellWallet and Kyrrex.
- A portion of the funds was converted to the privacy coin Monero via Wagyu.
- Assets were bridged across multiple blockchains.
Data from Lookonchain indicated that a wallet identified as 0x9EcA spent $37.96 million of USDC to purchase 16,658 ETH in a two-hour window, with the total spend reaching $62.97 million at an average price of $2,286. The Ethereum ledger shows that wallet 0x9EcA passed almost all of its ETH on within hours of the purchase. As of 14:35 UTC, one wallet (0x65C3) held 7,844 ETH, valued at approximately $18 million at a price of $2,290.