Odaily Planet Daily News MistTrack released an update on the CoinEx attack on the X platform:
1. CoinEx attackers bridged SOL from Solana to Ethereum addresses (0x602...397) and (0x938...4d8) via Wormhole Bridge in the past 24 hours. The attacker then exchanged the SOL for ETH through ParaSwap, KyberSwap, and Uniswap.
2. Address (0x938...4d8) transfers all 150 ETH to the platform (KuCoin, Sideshift, ChangeNOW); address (0x602...397) transfers 60 ETH to KuCoin.
3. The attacker exchanged SOL for ETH through Mayan Swap and bridged it from Solana to the Ethereum address (0x413...54F).
4. Currently, the attacker's address (G3ud...t1kq) still holds 40,399.9 SOL, and the attacker's address (0x413...54F) still holds 606.6 ETH.