According to Wu Blockchain, a user reported that all 273,000 USDT funds in his iToken wallet (formerly Huobi wallet) were transferred out on the evening of October 3, which was suspected to be stolen rather than an asset protection transfer implemented by a security agency.

The main funds transferred out by users first stay in TCAAWW...CDnZBX, and USDT is exchanged for 2.899 million TRX through SUN io, and then transferred to a new address and then to three other new addresses. The three new addresses then split the funds once, half of which is transferred to the ChangeNOW deposit address, and the other half is transferred to the Binance deposit address (TGs7tz...GW1jLa) through a transit address.

Each time the funds are separated, a new address is used for the operation and finally transferred to the exchange deposit address. This method can be judged as not a fund protection performed by a security agency; and since only a one-time transfer operation is completed from the Binance deposit address (TGs7tz...GW1jLa) to many addresses, there may be more victims.