PANews reported on December 5 that according to SlowMist founder Yu Xian, the stolen funds from DEXX were being collected on a large scale and transferred across chains. According to the information released by hella1413, the funds began to be collected at around 5:30 am Beijing time today, and then at 7:00 am, the address quickly transferred the collected 56,907 SOL to 7 new addresses, each containing about 5,600-5,700 SOL. Around 7:30 am, these funds were transferred to multiple new addresses in small amounts, and some funds were transferred to the Ethereum network through the Wormhole cross-chain service. Yu Xian said that these funds are being decentralized and transferred across chains, and the hacker addresses that cross the chain to Ethereum all start with 0xffe.