The movement of funds comes days after the hacker dumped 50,000 ETH.