On-chain sleuth ZachXBT linked the attacker to previous key compromises on platforms like SpaceCatch, OKX DEX, and others.