Guys, they know who did this
All hope is not lost. It looks like they know who did the attack on the cold wallets:
The attacker did make one mistake, however.
Block's Clay Garrett said on X that the operator used a paid account at a “well-known blockchain data provider” to query the source addresses during the sweeps, and that the provider's internal logs matched the suspected workflow with what he called extraordinary specificity, down to the number, timing and sequence of requests.
[link] [comments]