SlowMist Cosine disclosed on the X platform that early this morning, the DEXX attacker converted another batch of various value tokens on the Solana address into SOL, but has not yet continued to transfer them out. In addition, the attacker's EVM (ETH/BSC/BASE) addresses began to show abnormal movement tests, but there has not been a large-scale abnormal movement.