PANews reported on May 27 that on-chain detective ZachXBT disclosed on the X platform that the meme token CAT team @sol was related to the hacker who attacked trader GCR. A few minutes before the hack, the address associated with them opened a $2.3 million ORDI and $1 million ETHFI long position on Hyperliquid.

The @sol team controlled 63% of the supply through its own issuance, sold over $5 million of CAT, and then transferred the profits to multiple wallets. 6M54x received about 15,000 SOL ($2.5 million) from the CAT sale and began depositing funds into Kucoin (4,800 SOL) and MEXC (4,800 SOL and 1.4 million USDC) on May 25. Through time analysis, ZachXBT found that shortly after the Solana deposit, two exchanges on Ethereum and Arbitrum saw withdrawals of similar amounts.