You misunderstand how these things work. LN wallet and LN node has nothing to do with the exchange customers, Unless the KYC exchange customer uses to send/receive funds via lighning, then it is not connected at all. You do not need to be the exchange customer in order to use the lightning wallet and this was probably the case. The Bitlifi wallet only uses a phone number to identify the owner of the wallet, so a burner phone will stop the investigation right there.
I understand all that. Whatever the case might be, the people that work there should have immediately frozen the funds and contact the authorities as soon as they got my email.
reply
They wrote there were no funds left. Imagine the attacker, they most likely setup many LN wallets at custodial providers (Bitlifi, Wallet of Satoshi, etc) with fake data (mobile phone, email) and just sent LN payments between them to make the tracking worse. I guess in the end, they sent it to something like FixedFloat and exchanged it for Monero.
reply