That escalated quickly, so when Zachxbt has exposed the addresses. Metawin was able to restore everything and is fine again. But with that losses, I hope that they've got some connections and able to quickly stop the withdrawals further from the connected addresses that have been used by the hacker/s.
The hackers don't seem to be very smart because they sent the funds to a CEX so they could be traced quickly.
IMO, they're aware of that before they do the hack. Sending to a centralized exchanges will allow them to get on hold and halt the withdrawals quickly. Unless they've done it on a purpose or they aren't really smart at all. I wish that the stolen funds will be retrieved asap.