2 BTC reward for info on wallet drainers

Hey everyone, I just had my Solana wallets emptied out, losing thousands of Sol due to a hacker group. They got into several of my wallets, and honestly, I have no clue how they did it. I thought I was careful and took all the right steps. The stolen Solana was sent to this address, which I suspect is the primary account used by these thieves: https://solscan.io/account/7uTT8Xi5RWXzy7h9XL244GRgEycDYDhLjr3ZyNdXi8pZ I'm offering a 2 BTC reward for anyone who can help track down these criminals. I get that I probably won't recover my funds, and I'm okay with that. What I'm really after is justice getting these guys prosecuted and arrested. If anyone can figure out which exchanges they're moving the funds to, we might just catch them that way. Any info that could help with a conviction would be worth its weight in gold. I’m putting up 2 BTC as a reward. I'm hoping others who’ve fallen victim to this scam will come forward too. We could pool some BTC together to increase the reward and get more eyes on this case. These people are wrecking the crypto community, and it's high time we band together to take down criminals like this.

This won't be easy; no one can easily find the person who is responsible for this since most of these hackers use mixers. Sorry to hear that, but I believe the only thing you can do is report this to authorities. Instead, the FBI has a public service for scam victims that you can use to report your issue; please see the guide below. - https://www.ic3.gov/PSA/2023/psa230824 I'm thinking about how the hacker gained access to your wallet. Have you used your wallet recently for some airdrops or connected your wallet randomly to an unknown or any new server?

That address is a a hot wallet owned by relay bridge. So i guess the hackers were bridging and exchanging your sol to the other token through bridge it. So i think you can try to ask Relay's admin and tell them about your case. They may able to help you to trace your fund. This is the most difficult part since hacker was able to fill a destination adress. So the money bridged will be sent to their address directly. So i thikn the better you head to the relay's discord, then ask admin and explain what's your problem.

This hacker's wallet is currently still actively swapping and also receiving some Sol from other sources. Is the hack still ongoing? The main issue is the mixer involved in obfuscating these transactions; users with access to any on-chain analysis might be able to track it better. However, I'll try to investigate as much as I can if I have some free time, hoping to find something.

It feels really bad to hear about your loss. Once the coin is mixed or bridged the chances of getting it back are slim. But if everything is properly documented at least the rest of the community will benefit. The announcement of 2 BTC reward is quite big. But you have to be careful. After such post a bunch of scammer will usually flock to you. They will pretend to help you by sending you personal message. In fact they will try to rob you even more or ask for a fee in advance. The best you could do now, report the address to which the coins were sent to the Solana project especially the relay bridge, major exchanges like binance/bitget and chain analysis type companies. As BitMaxz said don't delay and file a formal report with FBI IC3. If someone wants to help via DM, do not give them a single penny or give them access to your wallet.

Even right now the wallet is still receiving money every seconds, if it were EVM maybe I could figure out what happens but solana blockchain explorer is very confusing to me. However, the address you've given according arkm belongs to relay.link https://intel.arkm.com/explorer/address/7uTT8Xi5RWXzy7h9XL244GRgEycDYDhLjr3ZyNdXi8pZ, no wonder I searched up the address in relay explorer and found nothing. Maybe you're not sharing the right address? if you got the right address you could search where the hacker send their money through relay's explorer https://explorer.chain.relay.link/ and trace it from there.

That is the explorer for Relay’s own blockchain. It probably won’t give you much information if you looked there. You can still see every bridge transaction made by going to https://relay.link/transactions. It will give you precise details about the destination address where funds were moved to on another blockchain.

Yeah that was my mistake, thanks for pointing out. I don't realize relay got its own blockchain, i thought they just process their transactions in L2  .