Stolen funds from the Revenue-related transactions were divided between two attacker-controlled addresses, with 20% sent to one address and 80% to the other.

verified span

“Funds taken through the transactions were then divided between two addresses controlled by the attackers, with 20% sent to one address and 80% to another.”