chore: extend list of blocked addresses on relayer (#4696)

### Description

<!--
What's included in this PR?
-->

### Drive-by changes

<!--
Are there any minor or drive-by changes also included?
-->

### Related issues

<!--
- Fixes #[issue number here]
-->

### Backward compatibility

<!--
Are these changes backward compatible? Are there any infrastructure
implications, e.g. changes that would prohibit deploying older commits
using this infra tooling?

Yes/No
-->

### Testing

<!--
What kind of testing have these changes undergone?

None/Manual/Unit Tests
-->

typescript/infra/config/environments/mainnet3/agent.ts

@@ -418,7 +418,7 @@ const hyperlane: RootAgentConfig = {
     rpcConsensusType: RpcConsensusType.Fallback,
     docker: {
       repo,
-      tag: 'efd438f-20241016-101828',
+      tag: 'b1ff48b-20241016-183301',
     },
     gasPaymentEnforcement: gasPaymentEnforcement,
     metricAppContexts,
@@ -452,7 +452,7 @@ const releaseCandidate: RootAgentConfig = {
     rpcConsensusType: RpcConsensusType.Fallback,
     docker: {
       repo,
-      tag: '5cb1787-20240924-192934',
+      tag: 'b1ff48b-20241016-183301',
     },
     // We're temporarily (ab)using the RC relayer as a way to increase
     // message throughput.
@@ -485,7 +485,7 @@ const neutron: RootAgentConfig = {
     rpcConsensusType: RpcConsensusType.Fallback,
     docker: {
       repo,
-      tag: '5a0d68b-20240916-144115',
+      tag: 'b1ff48b-20241016-183301',
     },
     gasPaymentEnforcement: [
       {

typescript/infra/src/config/agent/relayer.ts

@@ -169,16 +169,26 @@ export class RelayerConfigHelper extends AgentConfigHelper<RelayerConfig> {
       }),
     );
 
-    return allSanctionedAddresses.flat().filter((address) => {
-      if (!isValidAddressEvm(address)) {
-        this.logger.debug(
-          { address },
-          'Invalid sanctioned address, throwing out',
-        );
-        return false;
-      }
-      return true;
-    });
+    const sanctionedEthereumAdresses = allSanctionedAddresses
+      .flat()
+      .filter((address) => {
+        if (!isValidAddressEvm(address)) {
+          this.logger.debug(
+            { address },
+            'Invalid sanctioned address, throwing out',
+          );
+          return false;
+        }
+        return true;
+      });
+
+    const radiantExploiter = [
+      '0xA0e768A68ba1BFffb9F4366dfC8D9195EE7217d1',
+      '0x0629b1048298AE9deff0F4100A31967Fb3f98962',
+      '0x97a05beCc2e7891D07F382457Cd5d57FD242e4e8',
+    ];
+
+    return [...sanctionedEthereumAdresses, ...radiantExploiter];
   }
 
   // Returns whether the relayer requires AWS credentials