Those wallet addresses are from Pre the hack.
Thanks for asking.
If it was good enough for the mods/admin of the forum, why is it not good enough for you?
Because I was contacted by the OP, who no doubt values my option
(as a non DT member of the forum's community) to provide an honest and unbiased appraisal of the information I have at hand. Wallet address are sometimes sold with an account, hence let's see a signed message from a time prior to when the hack is supposed to have occurred.
Given the OP is in no hurry to remove the hackers posts, then I am also in no hurry.