I can only send an email with a list of accounts (maybe 5 or 6) and say: please do an audit on these accounts. All with the same flag, all in the same clan and all with several new cooling modules acquired after 1 or 2 days that the item appeared.
And they will? They have the means to review token purchases and the date of purchase of these items? How can I know that they have?
Common sense indicates that they are hacked accounts, but without an audit the proof can not be obtained.