It appears the attack began on Radiant’s Radiant’s Ethereum Layer 2 Arbitrum instance and then moved onto BNB Chain, Arkham data shows.