There are two Sui wallet addresses of the attacker that were urgently blocked. The frozen wallets contain the main portion of the stolen capital