[THREAD] Here's what we know so far about today’s #Twitterhack & #Bitcoinscam. As of now, the scam’s main BTC address (bc1...0wlh) received ~$120k in donations in 375 transactions. No funds have been cashed out at exchanges yet. 
2/ We know of 2 other donation addresses that were posted by the scammers on hacked Twitter accounts (bc1...d24x and bc1...w39l), which received $6.7k in 100 transactions.
3/ The Ripple address that was posted has not received any funds at this time. There may be other scam addresses; please DM us if you have others.
4/ Unsurprisingly, the hackers used some of the funds from the different scam addresses to pay into their main collection address to make it seem like more people are participating and benefiting from the scam.
5/ On the source of victim funds: The largest victim ($40k) seems to come from a Japanese wallet based on the wallet’s previous transactions with Japanese exchanges. Most of the other sources of victim funds are international exchanges w/ a small amount from US exchanges.
The funds are on the move and we are monitoring in real-time. The wallet 1Ai52...UuyF received 5 BTC and has been active since 05/03/2020. We are collaborating with our customers to find leads from this wallet. (Twitter won't allow posting full addresses right now it seems)
7/ Addresses are labelled in our products and we are continuing to add new addresses as we find them. Affected customers will see it in Reactor and KYT. We will keep everyone posted on any additional insights we uncover.
