This is all under assumption that 0x563b377a956c80d77a7c613a9343699ad6123911 is controlled by the…
keorn
11

Assumption? Did you read the second post in the series? I showed how the funds were tracked from the creation of the malicious smart contract: