The social network Twitter presented a vulnerability due to an attack by hackers on the verified accounts of certain celebrities. They caused such havoc that they were victims of phishing or fraud.
It was discovered that these hackers were using accounts that they had previously used to send funds from Coinbase and Bitpay.
According to a Whitestream investigation, three transactions with the beginning of address "1Ai5", seem to lead to wallets that are connected to Coinbase and BitPay. But then they switched to Bech32 when they used non-crypto accounts.
The important thing is that now the main address is the one that collects all the profits made. They received 14.75 BTC which would be about USD 135.00.
It is stipulated that at least three transactions lead to these two exchange houses, as the first address in May 2020 made a transfer of 1.2 BTC. And the last two were sent two days before the twitter attack.
This is a very sophisticated thing to know since the exchange address is always different from any other entry. This makes it more difficult to track, although it will most likely change to a Bech32.
For Whitestream, they sent a small amount to a Bitpay address and the other two were sent to Coinbase.
But this is not all, because although these addresses are easy to track and you can know the identity, there is one detail and that is that they are commercially used, therefore it would be difficult to know who is behind them.
You just have to wait and see what this entails, which if it is safe is that it will change the perspective of things a lot and good and bad things can come.