Stolen funds have now been transferred to a bunch of addresses which I assume is either a mixer or the hacker's collection point.
bc1q0r3fwzyrspdl34nsrxm5354wx96zsnfrt9nvmt (along with 50 other btc addresses) transferred BTC to 30 addresses.
bc1q0r3fwzyrspdl34nsrxm5354wx96zsnfrt9nvmt is now connected to a wallet with a total of 17,606 addresses (according to: