During the exploit, the hackers did not target the Ethereum chain, instead, they ended up with stablecoins on other networks. An hour after the hack, most of the haul sat in known large wallets, with no signs of splitting or transfers to Tornado Cash.