Crypto investigator ZachXBT stated that funds were withdrawn from multiple exchange accounts, converted to ETH, and then transferred via instant exchanges, Monero, and cross-chain bridges.