The $gmx exploiter has moved half of the funds to multiple addresses.
He started by moving funds to 0x99CdeB84064c2BC63de0CEa7C6978e272d0f2DAe.
Exploiter address 0xDF3340A436c27655bA62F8281565C9925C3a5221.
He currently holds 9.000m $dai in 5221 wallet and 2.600m eth.
The daE wallet holds 6.000m $dai and 266.000k $eth.
He got multiple onchain messages.
One from Xvix.eth offered 10% white hat bounty in return of 90% funds in 48 hours.