Following the October 29 Binance hack, automated scripts distributed funds from the original 10 attacker wallets across over 100 new addresses, then fan-out split them across more than 400 addresses