Bitquery: Associated theft network moved approximately $4.06 million from 365 TRON wallets

Bitquery researchers identified 43 collection addresses tied to a single fee wallet that drained at least $4.06 million in USDT from 365 TRON wallets between October 5 and November 4, after matching a reported iPhone wallet theft to on-chain transaction amounts and timing and then tracing other addresses by traits such as emptied balances. The finding expands a single reported loss into a broader cluster of linked thefts on TRON, though on-chain records cannot show which phone or wallet app each victim used, so not all losses are confirmed to stem from the iPhone flaw or DarkSword. The scale suggests a coordinated sweeper operation rather than isolated incidents, with a shared fee wallet linking the collection addresses. What remains unresolved is attribution: whether the same exploit explains every drained wallet. Next, watch whether investigators tie more victim reports to the same fee wallet and whether the $4.06 million figure grows as additional linked addresses are identified.