A note on this write-up.
This is the long version of a talk given at leHACK.
Identifiers are defanged: C2 IPs are masked, on-chain addresses and transaction IDs are redacted, exact amounts are rounded and block heights and timestamps withheld so the victim's transaction can'
