Incident overview
Assets linked to the previous Step Finance compromise moved again; the record tracks post-incident flow rather than a new attack.
Amount basis
No single verified USD loss figure was published; see the incident record.
Evidence boundary
The archive preserves the publicly reported cause, sequence, asset-flow status, and evidence boundaries. Attribution or downstream movement not established by the cited sources remains unconfirmed.