That's a valid point, i don't know what exactly is happening but it's suspicious activity.
It seems that they have transferred those Rise which wasn't withdrawn after 30 Nov , but how can they access those tokens when exchange is decentralized.
All transactions happened on 15.This is really very suspicious but we cant still drawn some conclusions yet.