As some other commenters pointed out, those small transactions are all spam. So I decided to go back in the transaction history and look at what the attacker h

As some other commenters pointed out, those small transactions are all spam. So I decided to go back in the transaction history and look at what the attacker has done with the funds. So far, it has all been funneled (through about 2 hops), to something called "Huobi 35", e.g. this transaction[0]. Some of these have taken place in just the last few minutes (17:15 UTC or so). I'm assuming "Huobi 35" is the Huobi exchange?[1] And maybe "Huobi 35" refers to this 35% APY thing they offer?[2] If that's accurate, why would the attacker take this approach? Won't authorities be storming Huobi's offices and taking the ETH? Is it possible that through Huobi the attacker is able to exchange for other coins very quickly? If you look at all the transactions leading to Huobi so far it is only a small percentage of the amount stolen, but it's still many millions of dollars... Also, why'd they wait so long to move into Huobi? [0] https://etherscan.io/tx/0x075df6c4b44733a0e76aa4947b56b4c0c00ec136d7865edc1ac7068264e15704 https://etherscan.io/tx/0x075df6c4b44733a0e76aa4947b56b4c0c0... [1] https://www.huobi.com/ https://www.huobi.com/ [2] https://www.huobi.com/support/en-us/detail/74899843012340 https://www.huobi.com/support/en-us/detail/74899843012340