Post
This post by its id.
https://api.web3aggregator.io/api/v1/posts/16651 curl -H "Authorization: Bearer $W3A_API_KEY" 'https://api.web3aggregator.io/api/v1/posts/16651'Needs a key: W3A_API_KEY in your environment.
The API gives this message alone: an album's other parts are posts of their own there, linked by album.
API docsAn institutional entity is suspected to have lost ~$2.84M to DPRK-linked SquidSquad on October 8, 2026 on BSC.
Yesterday (Oct 20), the attacker deposited 1111.2 ETH into Tornado Cash and withdrew to three addresses.
Tornado withdrawal addresses:
From there, all funds were bridged from Ethereum to Tron via USDT0 and consolidated at:
Both consolidation addresses have exposure to previously attributed DPRK addresses.
Within minutes, the funds moved through intermediary addresses to Chinese OTCs, likely to evade any potential Tether freeze.
Victim address:
Theft address:
Yesterday (Oct 20), the attacker deposited 1111.2 ETH into Tornado Cash and withdrew to three addresses.
Tornado withdrawal addresses:
0xb8b25f535a6e51d0b18c48941d791c7e83559d2b
0x35c72e26f6888b4cba8668c6cfa4143599680bfe
0x8e4a232ac8a05d1f4cfe4458a96a581ceeb7e848From there, all funds were bridged from Ethereum to Tron via USDT0 and consolidated at:
TEvUsnwXvprdvB7eNGiqh6rDiMqFiC8TBU
TVxzjnx3GPDTciiuagXPaUbU5f5y13VouxBoth consolidation addresses have exposure to previously attributed DPRK addresses.
Within minutes, the funds moved through intermediary addresses to Chinese OTCs, likely to evade any potential Tether freeze.
Victim address:
0x579be84d2a0f7bcfc34b4b3883153adec84ff153Theft address:
0x049b1ecce5e2fb254821bc9dc3ae98c5a6eb7e80