So, I read about the recent NPM exploit stealing funds from soft-wallet owners by address poisoning. Evil, but smart (obviously, like all hackers).

The point is, are there widely publicised specific transactions that fell victim to it? Can anyone point to specific transaction-ids, P2WPKH addresses (that I can look up on the Blockchain), along with evidence if available, that went to the attacker?

Also, I am curious, if the specific transactions become well-known how much of an inconvenience does it cause to the attacker? Suppose the whole Bitcoin world now knows that some addresses, e.g.

bc1qg4....

belong to the bad guy. I suppose it means he cannot easily off-ramp into Fiat anymore, at least not large amounts (like if he wants to buy a penthouse in Dubai with his windfall)?

Or, can he just spend his coins directly without going through exchanges?