He made tweets at the end of September when there were huge movements of FTT from Alameda to FTX where he lied and tried to downplay them as "wallet rotation". I posted about that here: https://news.ycombinator.com/item?id=33568688.

There is a paper/tweet trail a mile long that SBF was trying to cover up malfeasance that pretty clearly shows mens rea in my opinion.