The exchange reports more than $7 million moved from custody to outside wallets, with recovery still at an early stage.