The attacker sold about 7.2 million CYS in 15 transactions before the recipient address was blacklisted roughly 76 minutes after the mint.