Blockchain analytics traced stolen CORE tokens moving through wallets connected to infrastructure at Bybit, Gate.io, and MEXC following the October 31, 2026 b14g exploit.