pull down to refresh

Did the attacker manage to steal anything at all though? Doesn't seem to be the case from a few random addresses that I've checked from https://gist.github.com/jdstaerk/f845fbc1babad2b2c5af93916dd7e9fb