Several wallets reportedly belonging to Rain sent suspicious token transfers to a new address.