The fact that they are faceless makes it absolutely impossible to catch them, and also kind of impossible to recover stolen funds from them - they are very professional (if I should use that word).
Such an amount stolen in coins can't be recovered just easily as you guys thinks, even the one that was sent to centralised excahges, may have hard time being recovered because some of the policies of those centralised excahges cover's the protection of users right as regards to deposites, so not just that easy, there must be legal procedures and court orders for such accounts to be frozen.
So metawin have alot of hard work to do, in trying to recover theo stolen $4million, because majority's of that transactions where sent to personal Wallets which could be very hard to track.
They need to cooperate first to the authorities before that govern entities will order that exchange to freeze the deposited amount or the assets have those account owned by the hacker reported. That's why it needs swift action before the hacker totally pull out the amount they stole from Metawin.
But base on things happen and what we can see on them they don't much affected of the hacking incident happen and they continue to do their thing with no costumer complains happen. Yet we can see that Metawin have deep pocket and can cover up those losses. This issue bring lots of exposure them then also people got more confidence because people know that this casino is not the same to other small time one that once they experience hacking then their whole operation collapsed.