The attackers moved funds off Arbitrum quickly to avoid having them frozen, as had happened to them in a previous hack