Go look at that address on mempool and see if the sats are still there or if the attacker moved them.
Login to reply
Replies (1)
That's one of the destination addresses your coins were sent to?