The Binance hacker's XRP playbook: small first, then big.
Nov 2, 02:12 UTC: 1,000 XRP to a fresh account. It still holds 1,000.
03:47–03:50: 1,000 XRP each to 6 new accounts.
03:52–04:00: 9 payments of 10M–40M into those 6.
Today the 7 hold 233.46M XRP. Zero outgoing payments.