Continuation of the SafeMoon investigation

In continuation of the investigation into the Safetoon hack, we see the further movements of funds from the hacker's address 0x237d58596f72c752a6565858589348d0fce622ed (our ?Blue meerkat? where were the previously stolen funds in the amount of 27380 BNB) to another address 0xc6a84899ea428cf69a0f61d5d8f32b2bcb63962f:

Apr 19, 2023 were withdrawn 100 BNB by the transaction with hash ID:

0xdcf05681b686ed10f4c743746a22fe26689ddbd098c5d8683d9404563ec3f5a4

Apr 20, 2023 were withdrawn 10000 BNB and 11804 BNB by the transactions with hash IDs:

0x7d20a7057a3bdc96fc5c3f8bba2375394b7ba3d8203010def86262589e3857ba

0x39a3949eafdac50389d4e4d5b66b310f55480a717bee6c7139aed8250956e53c

It should be noted that the address 0xc6a84899ea428cf69a0f61d5d8f32b2bcb63962f is not new. In February and March 2022, large amounts in BNB tokens were already withdrawn to it from the BitMart cryptocurrency exchange by transactions:

0x7270c708fbe09358f91fa5efcfa53e7de942ac808c3d526d0a089851cf5428f8

0x792a881d2f0da38905c63f9beb46c9c5655614b61c75280caffe6dc9e9237616

This provides additional opportunities for deanonymization of the attacker.