According to ChainCatcher, SlowMist founder Yu Xian Yu X said in a post that early this morning, various value tokens on the Solana addresses related to the DEXX attacker were exchanged for SOL, and these SOLs have not been transferred out yet.

In addition, the attacker's EVM (ETH/BSC/BASE) addresses began to show abnormal movement tests, but there has been no large-scale abnormal movement.