www.osintinvestigate.com
The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults.