A post by @PeckShieldAlert on X.

The BlueMove hacker-labeled address bridged 115,000 USDC from Ethereum to Hyperliquid and purchased 188.25 XMR at $608.43, per PeckShieldAlert. The funds trace back to the July 11, 2026 exploit of BlueMove, an AMM DEX operating on Sui and Aptos, in which an attacker drained 710,670 SUI valued at roughly $529,000 from 389 locked liquidity pools. The movement of stolen funds through a bridge into Hyperliquid and conversion into Monero signals a laundering attempt, as XMR is commonly used to obscure transaction trails. The exploit's impact was concentrated in locked liquidity pools, raising questions about BlueMove's pool security architecture on both chains. Watch for further movement of the remaining stolen funds, potential exchange listings or freezes of the hacker-labeled address, and any response from BlueMove regarding compensation or recovery efforts.