Bloom attacker moved funds using 2,152 different intermediary and destination addresses

October 28 — According to Specter,the Bloom attacker stole nearly $1 million in funds, and the transfer pattern suggests the possible use of automated tools, repeatedly splitting, consolidating and cross-chain operations. The attacker used a total of 2,152 different intermediary and destination addresses, including 1,326 Solana addresses, 822 EVM addresses and 5 Zcash addresses. The attacker also cross-chained funds to Zcash, of which 26.099 ZEC has been transferred into the Sapling privacy pool.