tl/dr: using the given transaction hash we find the reciever's hash.
check link for more information.

Original writeup (https://floatingbrij.medium.com/transfer-write-up-heroctf-7166bea55206).