BTC Turk ($90M+) and Sportsbet ($3.5M+) were both hacked earlier today on multiple chains likely by the same threat actor due to commingling of funds. 

Funds were quickly transferred to Coinbase, Binance, Gate, MEXC, Bybit, Gate, ChangeNow, FixedFloat and withdrawn to Bitcoin 

and

Funds were bridged via THORChain/Wan Bridge to Bitcoin

Theft address 0x327a81d0d128db8886d265be73c9fdda97194f30
r4tvMzLrhWGCZ6W9yZRhWguEhovxsHSTRB
TJZwDMSp9PsjvaCn7SKHCbkFEX8jgEY6XC
TTKhC17M3xdXtrKDU5niLg4YH2rK742D8D
TDgZKxhyFQWCsNK1p7d1tVifeuW2DJTUEo
TQWSmSqns2BLczLEMpy96tNq3MagM66H4b
TJZ8NNxJETGDzGaWwSHwjGrzzz2Zhvexo2

So the funds went into CEXs and then onto Bitcoin? How can you they are the same person, I thought that CEXs obscured that sort of thing in most cases?

I like pleasure spiked with blockchain and music is my aeroplane. It's my aeroplane. /pizzadao underboss and /pixelwooks co-lead. Featured in "Number Go Up" 📖

Husband, dad, dev. I document what I see.

⭐ DEGEN Tips FAQ: https://paragraph.xyz/@rjs/degen-tips-ultimate-faq-v8 ⭐

Not financial advice or a recommendation.

I have not written up on it before for obvious reasons (but your guess is not far off)

Is it a secret? If not, have you written it up before? My naive guess is time/value/graph correlation plus lots of experience sauce.

Does that mean you can identify sybils for projects?

Seems so. Interesting.

Anyways, keep up the good work! I appreciate you.