The transfer followed roughly two months of inactivity. Addresses linked to the exploit still held about 81,864 ETH.