There are two Sui wallet addresses of the attacker that were urgently blocked. The frozen wallets contain the main portion of the stolen capital
Quote
Sources
Cetus Incident Report: May 22, 2025 Attack Disclosure
Referenced by
Two Sui wallet addresses belonging to the May 2025 Cetus protocol attacker were frozen by Sui validators and contain the majority of the stolen capital.
Crypto news
Claim