The hacker behind the theft of greater than $447 million of crypto from the crypto alternate FTX has been once more noticed transferring their ill-gotten funds. 

In accordance with Etherscan information, between 4:11 to 4:17 pm UTC on November 21, the attacker moved a complete of 180,000 Ether (ETH) throughout 12 newly created wallets — every receiving 15,000 ETH. The whole quantity moved totaled $199.3 million at present costs.

Latest transactions from pockets labeled “FTX Accounts Drainer” — Supply: Etherscan

On the time of publication, the ETH has not moved from any of the 12 wallets.

Some within the crypto neighborhood recommend the attacker could also be planning to subdivide it into smaller and smaller quantities with a view to confuse investigators, a course of generally known as “peel chaining,” or they might be planning to make use of a mixing service in some unspecified time in the future to obscure which cash are theirs.

In the meantime, some Ethereum customers seem to have despatched coded messages to the hacker asking for a share of the loot.

One person registered the Ethereum Identify Service (ENS) area title, “ftx-rekt200k-pls-help.eth” to precise that they’ve misplaced cash from the FTX collapse and to ask for a reimbursement from the hacker.

They despatched 21 transactions of 0.000001 Ether to the hacker’s handle in an try and get seen.

One other person was much more inventive. They registered the ENS area, “pleasecheckutf8data.eth” and despatched 12 transactions of 0.0001 ETH or much less to the hacker’s pockets handle.

An encoded message asking the FTX Accounts Drainer for a share of funds. Supply: Etherscan

Inside every transaction was a UTF8 encoded message that stated “Please ship me 100k~, I’ve medical payments to pay and go to the USA this coming December. I can not stroll correctly, and have aggressive muscle points. Please assist! I misplaced most of my cash on FTX.”

The message additionally contained a hyperlink to an Imgur submit which the person claimed was proof of their medical appointment.

Associated: FTX hacker dumps 50,000 ETH, nonetheless amongst prime 40 Ether holders

The hack occurred on Nov. 11, the identical day that FTX filed for chapter 11 chapter safety.

On November 20, the attacker transferred 50,000 ETH to a separate pockets after which transformed it to Bitcoin utilizing two separate renBTC bridges.

As of immediately, the hacker is the fortieth largest holder of ETH.