The funds moved through 520 transfers on Oct. 20-21, months after a $285 million exploit on Solana.