The attacker extracted the funds pulled from PancakeSwap's liquidity pool and bridged the stolen funds over to Ethereum.