1/🧵
after hack 6 – National Tax Service seed phrase leak 2
The National Tax Service’s coins were stolen twice
From the wallet whose mnemonic was leaked, $PRTG tokens
were sent to 0xcecb6d3e02103e6ccd088bfedd5eae35e9386d20.
Then they were returned at 00:30 on the 28th.
The person who performed that action turned themselves in to the police.
However, about three hours later, around 03:00 on the 28th, $PRTG tokens
were again transferred to 0x00B084456D81840FB133d83F03c392dc7Cf7777c.
0x8efa52827c229c434fe9c915b2d99841aa3e114d
0xfb5a2208b9eccfacd4e06ac3f2981795b496c7e5
0xffb929c83865b4c4b527e98d358852492dea92a1
Each wallet took 1M, 1M, and 2M $PRTG tokens respectively.
The person who surrendered to police imported the leaked mnemonic into a wallet and simply transferred the tokens to other wallet addresses.
In the second case, a 7702 signature was used to delegate authority to the contract 0xb771198a7568940d7811ff84bf6409fa80a5e4fd.