
All 15,819,002 USDT drained from CoinDCX's deprecated TQKJQ address on 21 October came from one wallet, in 88 transfers between 29 January and 30 March. CoinDCX says it built up because users kept depositing there while a sweep was failing. Before that, deposits into TQKJQ were forwarded on in a median 33 seconds. Forwarding came back on 28 April and moved another 3.0M of new money the same way, but it never touched the pile. That sat for 205 days, until it left in a single transfer. I can't put a name on the sender, TSC5MzYDNqtp3HDpqCNpTAs5pnT7wt4Hrd. Since 3 September it has taken USDT from 437 addresses, and it was still receiving at 14:50 UTC today.