Yesterday I had a video call with the guys at Bitlifi in Czech Republic (finally they crunched all the data and asked me to talk to them). They confirmed all the information in the files I sent them and matched the records with theirs. Everything matches with my information. That's good. We came to a final amount of 4.06BTC stolen. The difference to 4.07 means my node payed ~1M sats of fees (4.06 was the amount received at Bitlifi).

They provided me with the phone number used to register the Bitlifi wallet app used in the attack. If someone here can help me identify the number, please do: +19097073730

We agreed that next steps are identifying and contacting all the LN nodes where the funds were rerouted to. I'm working on this now. There's a possibility we could trace the funds to know where the off-ramp was.

They promised me that will collaborate with the authorities in case I decide to go ahead with this path. Good to know guys, I appreciate this.