PANews reported on February 22 that the Beosin security team analyzed that the attack method of this incident is similar to that of WazirX. Both used the front-end UI to deceive the multi-signature wallet into signing malicious content and tampered with the logic of the multi-signature wallet to implement the contract, resulting in the funds in the multi-signature wallet being transferred out. Funds worth US$1.44 billion were withdrawn, including:

401,347 ETH, worth $1.12 billion;

90,376 stETH, valued at $253.16 million;

15,000 cmETH, worth $44.13 million;

8,000 mETH, valued at $23 million.

Currently, the funds are divided into groups of 10,000 ETH and deposited in more than 40 Ethereum addresses. All hacker addresses have been added to the Beosin KYT tag library. Beosin KYT will issue alerts for all fund transfers involving hacker addresses.