The Solana wallet holding the stolen GoldPesa funds showed activity overnight, allowing us to trace the movement of new funds:
02:51 & 04:12 UTC: 1,382 USDT was bridged via Rango and Mayan from 0x620418954B1942b62eA190fC386796BD8829310e. Notably, on July 9, this same wallet transferred 595,007 AUDIO to 0xE38e9bb74b8f1eE322f6F07CebbA283C838E6fBF—the primary vault address currently holding the stolen assets.
04:14 & 04:15 UTC: 1,110 USDT was routed through Rango and Relay to a newly created Polygon address (0x86e75303beedF23844ce0c5D91A944A5e1822147).
Current Status: 772.49 USDT remains parked on Solana, while the 94,975.73 USDT on BSC continues to sit dormant without any movement.
02:51 & 04:12 UTC: 1,382 USDT was bridged via Rango and Mayan from 0x620418954B1942b62eA190fC386796BD8829310e. Notably, on July 9, this same wallet transferred 595,007 AUDIO to 0xE38e9bb74b8f1eE322f6F07CebbA283C838E6fBF—the primary vault address currently holding the stolen assets.
04:14 & 04:15 UTC: 1,110 USDT was routed through Rango and Relay to a newly created Polygon address (0x86e75303beedF23844ce0c5D91A944A5e1822147).
Current Status: 772.49 USDT remains parked on Solana, while the 94,975.73 USDT on BSC continues to sit dormant without any movement.
