The wallet-draining activity appears cross-chain and automated, suggesting a shared EVM exploit rather than isolated user ...