Skip to main content

Source: Сointеlеgrаph

The hacker behind the theft of more than $447 million worth of cryptocurrencies from the FTX crypto exchange has again been spotted moving his ill-gotten funds.

Between 16:11 and 16:17 UTC on November 21, according to Etherscan, the attacker moved a total of 180,000 Ether (ETH) through 12 newly created wallets, each receiving 15,000 ETH. The total amount of transfers amounted to $199.3 million at current prices.

Recent wallet transactions marked “FTX Accounts Drainer” – Source: Etherscan

At the time of publication, ETH has not moved from any of the 12 wallets.

Some members of the crypto community speculate that the attacker may be planning to split it into smaller and smaller parts to confuse investigators, a process known as “cleanup chain”, or they may be planning to use a mixing service at some point to hide which the coins belong to them.

Meanwhile, some Ethereum users appear to have sent coded messages to the hacker asking them to share the loot.

One user registered the Ethereum Name Service (ENS) domain name “ftx-rekt200k-pls-help.eth” to show that he lost money in the FTX crash and ask for compensation from the hacker.

They sent 21 transactions worth 0.000001 Ether to the hacker’s address in an attempt to draw attention to themselves.

Another user was even more resourceful. They registered the ENS domain “pleasecheckutf8data.eth” and sent 12 transactions worth 0.0001 ETH or less to the hacker’s wallet address.

An encoded message asking Drainer FTX accounts for a share of the funds. Source: Eterscan

Inside each transaction was a UTF8-encoded message that said, “Please send me 100k~ I need to pay my medical bills and visit the US this December. I can’t walk normally and I have aggressive muscle problems. Please help! I lost most of my money on FTX.”

The post also contained a link to an Imgur post that the user said was proof of his visit to the doctor.

Related: FTX Hacker Dumps 50,000 ETH But Still Among Top 40 Ethereum Holders

The hack occurred on November 11, the same day that FTX filed for Chapter 11 bankruptcy protection.

On November 20, the attacker transferred 50,000 ETH to a separate wallet and then converted it to bitcoin using two separate renBTC bridges.

To date, the hacker is the 40th largest holder of ETH.

Source: Сointеlеgrаph

Leave a Reply