BTC Turk ($90M+) and Sportsbet ($3.5M+) were both hacked earlier today on multiple chains likely by the same threat actor due to commingling of funds. 

Funds were quickly transferred to Coinbase, Binance, Gate, MEXC, Bybit, Gate, ChangeNow, FixedFloat and withdrawn to Bitcoin 

and

Funds were bridged via THORChain/Wan Bridge to Bitcoin

Theft address 0x327a81d0d128db8886d265be73c9fdda97194f30
r4tvMzLrhWGCZ6W9yZRhWguEhovxsHSTRB
TJZwDMSp9PsjvaCn7SKHCbkFEX8jgEY6XC
TTKhC17M3xdXtrKDU5niLg4YH2rK742D8D
TDgZKxhyFQWCsNK1p7d1tVifeuW2DJTUEo
TQWSmSqns2BLczLEMpy96tNq3MagM66H4b
TJZ8NNxJETGDzGaWwSHwjGrzzz2Zhvexo2

So the funds went into CEXs and then onto Bitcoin? How can you they are the same person, I thought that CEXs obscured that sort of thing in most cases?

I like pleasure spiked with blockchain and music is my aeroplane. It's my aeroplane. /pizzadao underboss and /pixelwooks co-lead. Featured in "Number Go Up" 📖

Seems so. Interesting.

Anyways, keep up the good work! I appreciate you.

building /crypto-education • computer engineer • adventurer onchain 

My quick guess is to correlating the $ value of inflows and outflows + adding up multiple inflows and multiple outflows.

But there is probably a bit more to it