TechFlow news, on February 14, GoPlus stated in a post on X that it has identified the attacker's related addresses and has blacklisted them all. Notably, the attacker used a wallet starting with 0x9AE to send Gas to multiple addresses but has not yet transferred tokens, meaning users still have a chance to move their assets to secure wallets.
Attacker's Gas distribution address: 0x9AEf1CA082c17f9D52Aa98ca861b50c776dECC35
Attacker's stolen token collection address 1: 0x49add3e8329f2a2f507238b0a684d03eae205aab
Collection address 2: 0x7831d05afc72a10bd475eb4777680b4e9204695a
Collection address 3: 0xb312a2c9ab9700dac49798f457b4c28e28f1c4fc
Collection address 4: 0xc657b6e6c59af5bcff4de626dab52832e77d2996
Users are advised to remain vigilant and regularly check their wallet security.
