It’s unclear who is behind the incidents, but early reports suggest the massive hacking operation occurred as a result of someone gaining access to Twitter’s internal security operations.

The attack, which was still underway as of late Wednesday afternoon, effectively gave the hackers control over one of the most influential media platforms in the world. But ironically, the payoff appears to have been relatively meager.

As of 6 p.m. ET on Wednesday, the Bitcoin address—loosely akin to a bank account number—broadcast by the hackers had received just under 12 Bitcoins, the total worth around $109,000 based on current prices. Some of the transactions could have been made by the scammers themselves.

The hackers have since moved half of that amount to another Bitcoin address.

It is possible to view the movement of the funds because of Bitcoin’s design, which creates a public ledger of transactions known as a blockchain. A popular service called Blockchain Explorer lets anyone view such activity—including that tied to the scam address (which is bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh).

Coinbase, the cryptocurrency company that was among the first targets of the scam, has been blocking any attempted payments to the scammers’ address—possibly undercutting the scam’s effectiveness.

Update: The scammers created a new Bitcoin address after 6pm ET, tweeting it out from the Twitter account of Square’s Cash App.

More must-read finance coverage from Fortune:

• Meet the one-branch bank that did more PPP lending than Citi
• Are we seeing a “reverse square root” symbol economic recovery?
• “A real bind”: Banks that carry out Trump’s new sanctions could violate Hong Kong security law
• Safelite’s CEO on steering the company through crisis—and getting sales back to pre-pandemic levels
• Why slashing product prices is usually a terrible idea