This is definitely not the first time this actor has targeted $SUI holders. Multiple rugs targeting Sui Network have traced back to the same operator, and there's a pattern worth understanding. The playbook is fairly consistent: execute the rug, then use Wormhole to bridge the stolen assets across to EVM chains. Once on Ethereum or other chains, they swap or bridge back into Sui under a fresh address. Rinse and repeat—this cycle has been running for over a year now. The methodology reveals how easily bad actors exploit cross-chain infrastructure when proper due diligence isn't done.