Now TRON, same attacker pattern:
Lower balances → consolidated
Higher balances → unique address per victim
Without victim reports, the larger drains could go undetected. If reported blamed on the user, and forgotten.
The Ill Bloom research effort lets us identify them.
⚠️ Ongoing Ill Bloom-related Bitcoin drain.
Funds are moving from lower-balance addresses in the affected set to:
bc1phdwxpx7x5z6mkrzppwgqxd4l797w2p6saj39q558wqcgw5766cwsk9rzlf
Higher-balance victims are being drained to separate destination addresses.
If your address appears

